> Markdown version of [/jobs/ext/3149372-second-line-security-event-analyst](https://www.wearedevelopers.com/jobs/ext/3149372-second-line-security-event-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Second Line Security Event Analyst

- **Company:** Vector Synergy
- **Location:** Brussel, Belgium
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Data Analysis, Microsoft Azure, Cloud Computing Security, Cyber Security, Network Security, Log Analysis, Security Information and Event Management, Microsoft Sentinel, Fortinet, Splunk, Cisco
- **Published:** September 2, 2026
- **Apply:** https://be.indeed.com/viewjob?jk=e6198fc13f33deae

## About the Role

* Experience in designing, developing and maintaining detection rules, alerts and analytics across SIEM, EDR/XDR and cloud security tools (e.g., Splunk, Microsoft Sentinel, Azure, AWS);
 * Experience supporting or mentoring less-experienced analysts, providing constructive feedback on investigation quality and reporting standards;
 * Practical experience with automation or SOAR use cases, identifying repetitive manual tasks and creating enrichment or workflow improvements.

Desirable:

 * Experience working in a regulated, high control environment such as defence, government, financial services or other enterprise sectors;
 * Hands on experience with cloud native security monitoring (Azure, AWS) and hybrid environments;
 * Experience with developing detections from network and Edge security devices such as Cisco, Fortinet/Fortigate, Palo Alto, or comparable appliances.

## Description

* Reviewing and validating investigations, supporting First-Line Analysts to ensure that alert closures, escalations, supporting evidence, and investigation notes meet CSOC quality standards, while confirming completeness, accuracy, and procedural compliance;
 * Acting as the technical escalation point for cyber security monitoring;
 * Performing in-depth log analysis and threat triage using SIEM and SOAR platforms, including Splunk Enterprise Security, Splunk SOAR, Microsoft Sentinel, and supporting security tools and data sources.


## Related Videos

- [WeAreDevelopers LIVE - Back to CODE100](https://www.wearedevelopers.com/videos/1909-wearedevelopers-live-back-to-code100)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Computer Vision from the Edge to the Cloud done easy](https://www.wearedevelopers.com/videos/263-computer-vision-from-the-edge-to-the-cloud-done-easy)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)