Our client is looking for a Senior IT Security Analyst
Role Context
As an IT Security Analyst, you are part of a central IT Security team within the company. You play an active role in protecting our critical IT and cloud environments against cyber threats.
An important part of this role is participation in the IT Security on-call service:
- On-call duty according to a rotation system of approximately one week every 3 to 4 weeks
- On-call duty runs from Monday morning to Monday morning (7 consecutive days)
- During this period, you may be engaged in handling, among others, Priority 1 security incidents
- You act as the first substantive point of contact for serious security events and operate autonomously
- You are able to independently analyze, decide, and act
- You work closely with IT Operations, Architecture, the CISO Office, and external partners for this purpose.
Cybersecurity Analysis & Detection
- Analysis of alerts, anomalies, and suspicious activities
- Development of defense strategies according to secure by design and zero trust principles
- Preparation of security risk and threat reporting for both technical and management stakeholders
- Implementation and follow-up of preventive security controls
- Application of information security standards (including ISO, NIST, CIS)
2. Incident Management & Crisis Management
- Preparing, maintaining, and testing incident response playbooks
- Actively managing security incidents
- Reporting incidents (technical and non-technical)
- Coordination during security crises and escalations
- Executing or supporting:
- Containment and eradication actions
- Forensic investigations
- Post-incident root cause analysis
- Collaboration with internal and external parties (SOC, vendors, auditors, CERTs, …)
- Supporting and following up on penetration testing and vulnerability management
3. Knowledge Management & Continuous Improvement
- Active contribution to knowledge sharing and documentation within the security team
- Threat hunting based on real-world threats and relevant intelligence
- Participation in or support of red/blue teaming activities
- Continuous improvement of:
- Detection systems
- Incident processes
- Reporting and metrics
4. Security Risk Assessment
- Performing security maturity assessments (technical and organizational)
- Preparing and maintaining technical security roadmaps
- Supporting risk-based decisions towards IT Architecture and management
- Mapping risks according to structured methodologies (e.g. STRIDE)
- Translating technical risks into understandable impact for non-technical stakeholders
5. Microsoft Security Tooling
Daily use and optimization of Microsoft security platforms, including:
- Microsoft Defender (Endpoint, Identity, Cloud, CASB, DLP, …)
- Azure security controls
- Integration of logs, alerts, and response flows
- Automation wherever possible (playbooks, use cases, response flows)
- …
