Loading ...

Job content

First Line Security Event Analyst (FLSEA) 1


  • Working Location:Mons, Belgium
  • Security Clearance: NATO Secret
  • Language:High proficiency level in English language



EXPERIENCE AND EDUCATION:


Essential Qualifications/Experience:

· University degree in a technical subject with a focus on Information Technology (IT), obtained from a nationally recognised/certified institution in addition to 1+ year experience in the field of cyber security analysis. The lack of a degree may be compensated by 3+ years of relevant experience in field of cyber security analysis. Similarly, the lacking experience can compensate by demonstrating a high level of knowledge in the field of cybersecurity
· Comprehensive knowledge of the principles of computer and communications security including knowledge of TCP/IP networking, Windows and Linux operating systems
· Broad understanding of common network security threats and mitigation techniques
· Experience in:
ü Security Information and Event Management products (SIEM) – e.g. ArcSight, Splunk
ü Analysis of Network Based Intrusion Detection Systems (NIDS) events– e.g. SourceFire, Palo Alto Network Threat Prevention
ü Log analysis from a variety of sources (e.g. Firewalls, Proxies, Routers, DNS and other security appliances)
ü Network traffic capture analysis using Wireshark
ü Logical approach to analysis and ability to perform structured security investigations using large, complex data sets

Desirable Qualifications/Experience:
· Holding industry leading certification in the area of cyber security such as GCIA, GNFA, GCIH
· Computer Incident Response Centre (CIRT), Computer Emergency Response Team (CERT)
· Proficiency in Intrusion/Incident Detection and Handling
· Experience in:
ü Full Packet Capture systems – e.g. Niksun, RSA/NetWitness Host Based Intrusion Detection Systems (HIDS)
ü Computer security tools (Vulnerability Assessment, Anti-virus, Protocol Analysis, Anti-Virus, Protocol Analysis, Anti-Spyware, etc)
ü Computer forensics tools (stand alone, online and network) Military communication systems and networks

DUTIES/ROLE:
· Perform initial analysis of logs and network traffic, determine alert severity and escalate when required
· Conduct research and assessments of security events within NATO Cyber Security Centre (NCSC) team
· Provide analysis of firewall, IDS, anti-virus and other network sensor produced events and present findings
· Appropriately leverage the comprehensive extended toolset (e.g. Log Collection, Intrusion Detection, Packet Capture, VA, Network Devices etc.) for enhancing investigations
· Support the end-to-end Incident Handling process
· Propose optimisations and enhancements which help to both maintain and improve NATO’s Cyber Security posture
Loading ...
Loading ...

Deadline: 20-01-2026

Click to apply for free candidate

Apply

Loading ...

SIMILAR JOBS

Loading ...
Loading ...