On behalf of a renowned space organization, Leonardo Belgium (LBe) is looking for multiple SOC professionals to carry out the constitution of a team that will have the unique and exciting opportunity to join a challenging and major European security project and contribute to the development of organization's cyber resilience.
The working location will the Redu, Belgium, and full-time on site presence is required. It's a standard, Monday to Friday type of schedule, there is NO 24/7, on-call, or weekend shift.
The main objective of the SOC team is:
Security monitoring, in-depth incident analysis, and crisis management support
Customer relations, including providing recommendations, continuous service improvement, and incident remediation support
Continuous improvements, including the development of process/procedure manuals and participation in the improvement plan for service efficiency and detection rules
The SOC Analysts actively monitors security threats and risks involving customers’ infrastructure. They ensure that the problematic incidents and events are troubleshooted or escalated if needed. They can also respond to complex security issues and proactively look for threats that may have evaded the organization's defenses.
Depending on their level, their main responsibilities will include :
Level 1:
Continuous monitoring of the customers' infrastructure to identify security incident
Triaging security alerts
Collecting data and context necessary to initiate Level 2 escalation
Responding on security incidents
Monitoring health of customer security sensors and SIEM infrastructure
Delivering scheduled and ad-hoc reports
Working closely with L2 and L3 Analysts towards the continuous improvement of the service
Level 2:
Conducting in-depth analysis of security incidents to identify the full kill chain
Executing risk hunting activities and conducting threat hunting exercises
Undertaking forensic investigations and performing evaluations for L1 and L2 analysts
Tracking incident detection and closure, and validating security incidents
Generating new use cases for emerging threats and reviewing vulnerability assessment reports with clients
Acting as a subject matter expert and expert witness when required
Level 3:
Supporting L2 analyst responses to complex security issues
Proactive hunting for threats that may have bypassed the organization's defenses
Discovering and relaying information about new vulnerabilities and emerging cybersecurity trends to the organization
Implementing changes in cybersecurity policy based on the information discovered
Leading the investigation and response to the most severe security incidents
Providing guidance and mentorship to juniors Analysts
Developing and refining the organization’s threat intelligence strategy
Here are the requirements for each job opening :
Level 1 SOC Analyst:
Education: Master’s degree[1] in STEM studies, Computer Science, Cybersecurity, Information Technology, a related field, or Bachelor with equivalent experience
Certifications: Entry-level security certifications such as CompTIA Security+, Cisco Certified CyberOps Associate, or equivalent, is desirable but not mandatory
Soft skills: Strong skills in regards to teamwork and collaboration, analysis and synthesis, communication, multitasking, and resourcefulness
Technical skills: Basic proficiency in shell scripting, log analysis, network protocols, security tools (SIEM, EDR, …), and server OS, mainly Linux and Windows
Languages: English CEFR level B2 minimum, both written and spoken
Other requirement: Eligible to undergo security clearance procedure (EU citizenship needed)
Level 2 SOC Analyst:
Experience Level: Min 4 years in a SOC or cybersecurity role
Education: Master’s degree in STEM studies, Computer Science, Cybersecurity, Information Technology, a related field, or Bachelor with equivalent experience
Certifications: Security certifications such as Certified Incident Handler (GCIH), Certified Ethical Hacker (CEH), or equivalent, is desirable but not mandatory
Soft skills: Strong skills in regards to teamwork and collaboration, analysis and synthesis, communication, and multitasking.
Technical Skills: Advanced proficiency in security tools (SIEM, EDR, …), mitigation strategies, forensic investigations, and security incident handling
Languages: English CEFR level B2 minimum, both written and spoken
Other requirement: Eligible to undergo the ESA and EU secret security clearance procedure (EU citizenship needed)
Level 3 SOC Analyst:
Experience Level: Min 5 years in a SOC or cybersecurity role
Education: Master’s degree in STEM studies, Computer Science, Cybersecurity, Information Technology, a related field, or Bachelor with equivalent experience
Certifications: Advanced security certifications such as Certified Information Systems Security Professional (CISSP), Certified Incident Handler (GCIH), or equivalent
Soft skills: Strong skills in regards to teamwork and collaboration, analysis and synthesis, communication, multitasking, resourcefulness, and leadership
Technical skills: In-depth expertise in threat intelligence, root cause analysis, incident response, malware analysis, and proactive threat hunting capabilities. Familiarity with cybersecurity frameworks such as MITRE ATT&CK is a big plus.
Languages: English CEFR level B2 minimum, both written and spoken
Other requirement: Eligible to undergo security clearance procedure (EU citizenship needed)
What do we have to offer?
An exciting opportunity to join the cutting-edge Cyber Security sector and work for the internationally renowned company Leonardo, the Italian leader in Cyber Security
The chance to boost your career, and receive training to speed up your personal development
A competitive salary based on experience, skills, and industry requirements
A supportive and inclusive work culture where innovation thrives and collaboration flourishes
Opportunities for advancement and career progression within a growing organization
[1] : A Bachelor with 10 years of relevant experience is considered equivalent to a Master's Degree. If the education requirement is not fully met, feel free to apply anyway, some flexibility is allowed on a case-to case basis