Centric - Information Security Engineer

For our client in the region of Louvain, we are looking for a freelance Information Security Engineer. What you doOur customers and employees deserve to sleep on their two ears, even though cyber-attacks are becoming more frequentAs an Incident Response Analyst, you and your colleagues play a big role in their peace of mindYou review incidents and help determine what needs to be doneYou strengthen the Security Threat Monitoring team within our Security Operations Center. This is a team of experts who are committed to cybersecurity every dayMonitoring existing security processes, but also making them better. Solving problems, but also preventing themIn a nutshell, that's what you do as an Incident response analyst / Information Security Engineer What do we expect from youYou monitor the security of our critical servers and systemsYou monitor the alarms generated by our security systems and take action on them : you set priorities and escalate an issue when necessaryBased on your knowledge of attack techniques, you will help to find the root cause of security alarms. For this you dive into the log files of servers and systemsYou will test and fine tune security alarms and incident response proceduresYou will discuss within the teams what to do in case of incidents and how to prevent them in the futureYou attend regular team meetings and scrumsYou document the context of the incidentYou help colleagues who are resolving the incident with additional analyses, if necessaryYou help ensure that we are working according to the right prioritiesDepending on the action taken on the incident, you close it, put it on hold, have it looked at again or escalate it. Your guide here is our runbook. You also provide suggestions on what action to take You participate in sessions on continuous improvement and help think through these questionsWhat lessons can we learn from how certain incidents were handled? Can things be done differently or better next time?What are the weaknesses in our security controls?Can our processes be more efficient? Do we pass on information to each other in the best way? What you bring to the teamYou have a broad view on the IT Operating systems & Middleware (Windows, Unix, Linux, databases) and networksYou have general to good knowledge of malware (types) and cyber-attack techniques (the kill chain)Knowledge of and experience with : security tools for detection and analysis security eventsticketing systemsnetwork security, Firewall, IDS, ...Experienced with Information SecurityExperienced with Web SecurityExperienced with Incident Management and Root Cause analysisExcellent Knowledge of SIEMBasic knowledge of ServiceNow