SOC L2 Analyst

Okatim is looking for a SOC L2 Analyst for one of our clients in the defence sector.

We are looking for an SOC L2 Analyst to provide advanced security event monitoring, investigate detected threats, and coordinate incident handling in collaboration with the SOC L1, Cybersecurity, IT, and OT teams. The role involves analysing security data from Microsoft Sentinel and other available sources to detect suspicious activity, assess its impact, identify root causes, and define appropriate corrective actions, particularly for medium- and high-severity alerts.

The Analyst will also contribute to the development and optimisation of detection capabilities by maintaining Microsoft Sentinel analytics rules, use cases, and playbooks. Responsibilities include conducting regular threat hunting activities across IT environments and, when required, ICS/OT environments. The role also involves documenting investigations and response actions, contributing to weekly reporting in English aligned with the MITRE ATT&CK framework, and supporting audits as well as the collection and analysis of evidence.

Technical Skills and Experience

• Experience investigating security incidents and conducting threat hunting activities.
• Strong expertise in Microsoft Sentinel.
• Ability to investigate and correlate security events across logs, endpoints, identities, network infrastructure, applications, and cloud environments.
• Knowledge of the MITRE ATT&CK framework .
• Expertise in security incident triage, root cause analysis, remediation coordination, and incident response management.Understanding of industrial control systems (ICS/OT).
• Understanding critical infrastructure, and the specific security and operational requirements of industrial environments.

Languages:

English and French/or Dutch and are required for the position.

The position is based in Brussels, on a hybrid work model.

Take the next step in your cybersecurity career by joining a team focused on strengthening security operations and enhancing threat detection capabilities. If you have the skills and experience we are looking for, we would be pleased to hear from you and explore how you could contribute to the team.