M102_P-095 - IT Cyber securité Specialist

Function

Our client is looking for a cybersecurity operations specialist to strengthen its security team and support the protection, detection, and response activities that safeguard a complex hybrid environment. This assignment is focused on network and infrastructure security, incident handling, and continuous improvement of operational security measures.

Responsibilities

• Manage day-to-day security tools and security incidents.
• Analyze, escalate, document, and help resolve security incidents.
• Coordinate with different teams to support incident resolution and improve the overall security posture.
• Handle alerts coming from the SOC and security tools, including SIEM and WAF-related alerts.
• Analyze network flows and correlate them with alerts and suspicious activity.
• Contribute to the security of network architectures, configuration quality, and exception management, including impact and risk analysis.
• Participate in tuning protection and detection rules for network security tools such as WAF, IDS/IPS, NDR, and proxy solutions.
• Support post-incident reviews by producing technical retrospectives, recommendations, and follow-up actions.
• Collaborate with ITSM teams on incident follow-up and action plans.
• Take part in security-related projects, including reviews, technical-functional input, and active project support.
• Contribute to process, procedure, and playbook improvements for SecOps activities.
• Carry out security monitoring and threat intelligence activities, including CVEs, IOCs, and MITRE ATT&CK tactics.
• Provide transversal support on security tools and take on other operational security activities based on service priorities.

Technical Skills

• Confirmed experience in security incident management, either as an incident responder or incident manager.
• Confirmed experience with IPS/IDS or NDR solutions.
• Confirmed experience managing firewall security.
• Experience securing DNS environments.
• Experience securing proxy environments.
• Experience working with SOC environments and SIEM/XDR technologies.
• Experience with WAF technologies.
• Ability to work with ITSM tools such as Jira Service Management or similar platforms.

Profile

The ideal candidate brings a strong background in operational cybersecurity and network security engineering, with a practical, hands-on mindset and the ability to respond effectively in critical situations. We are looking for someone who combines technical depth with a collaborative approach and strong communication skills.

• At least three years of experience in operational cybersecurity and network security engineering, beyond general network administration.
• Proven experience handling at least one real cyber incident involving investigation, containment, or remediation.
• Experience working in a large organization with high complexity and workload.
• Ability to document incidents, provide recommendations, and follow up on corrective actions.
• Strong analytical skills, urgency management, and prioritization in incident situations.
• Curiosity, adaptability, autonomy, and a team-oriented mindset.
• Assertive communication and the confidence to challenge when needed.
• Relevant certifications are considered an asset.

Practical Information

• French is mandatory.
• The role requires on-site presence approximately 60% of the time, or more if needed.
• This is a long-term consulting opportunity.
• The assignment includes a 40-hour workweek.
• The consultant must participate in a 24/7 on-call rotation with other team members.
• Some alerts must be handled within a maximum response time of 30 minutes.
• The work is carried out within the security function of the organization and integrated into existing incident, change, and SOC processes.

Contactperson & Reference

• Reference #: INW27884
• Pieter Messely
• pieter.messely@i4m.be