Cyber Security Analyst (SOC / Incident Response)

About the role

We are seeking a Cyber Security Analyst to perform initial triage and analysis of security events across the network, supporting incident response for the NATO Communication and Information Agency (NCIA) in Mons, Belgium.

Key responsibilities

• Perform initial analysis of logs and network traffic, determine alert severity and escalate as needed.
• Present findings in a clear, structured format with remediation recommendations.
• Research and assess security events within the Cyber Security Centre.
• Analyse firewall, IDS, anti‑virus and other sensor‑produced events.
• Leverage extended toolsets (log collection, intrusion detection, packet capture, vulnerability assessment, network devices) to enhance investigations.
• Support the end‑to‑end incident handling process and propose optimisations to improve the organisation’s cyber security posture.

Required profile

• University degree in a technical/IT subject with 1+ year cyber security analysis experience, or 3+ years relevant experience without a degree.
• Comprehensive knowledge of computer/communications security principles, TCP/IP networking, Windows and Linux operating systems.
• Strong written and verbal communication skills; ability to work independently and in a team.

Required skills

• Experience with SIEM products such as ArcSight or Splunk.
• Experience analysing NIDS events (e.g., SourceFire, Palo Alto Networks Threat Prevention).
• Log analysis from firewalls, proxies, routers, DNS and other security appliances.
• Network traffic capture and analysis using Wireshark.
• Familiarity with vulnerability assessment, intrusion detection and packet capture tools.