Analyste (Security Operation)
Description
i-CITY is looking for a Medior Security Operation Analyst to strengthen its cybersecurity operations in Brussels. The consultant will identify, analyze and qualify events generated by SIEM and EDR solutions. They will assess incident severity and handle notification, follow-up and escalation. They will also support security investigations and incident handling.
The assignment includes supporting security risk remediation and mitigation and recommending immediate and long-term corrective measures. The consultant will contribute to the security event collection and management strategy. They will participate in the continuous improvement of monitoring procedures for threats, vulnerabilities and attacks. Projects involving data classification, account security and data-loss protection are also part of the scope.
The consultant will act as the Microsoft Purview subject-matter reference, covering design, evolution and daily management. The environment also requires proficiency with Office 365 and ServiceNow, together with Microsoft skills including Azure, Entra ID, Active Directory, PowerShell, SharePoint, Windows Server, MDM and MAM. The assignment is full time from 1 September 2026 through 31 January 2027. The working model is hybrid, with remote work permitted a maximum of two times per week.
Top Reasons to Apply
Advanced security operations
Broad Microsoft ecosystem
Microsoft Purview ownership
Data protection projects
Hybrid Brussels working
Detailed Responsibilities and Skills
Additional Responsibilities
- Support risk mitigation
- Recommend immediate corrections
- Recommend long-term corrections
- Support security investigations
- Handle security incidents
- Contribute event collection strategy
- Contribute security event management
- Improve threat monitoring
- Improve vulnerability monitoring
- Improve attack monitoring
- Support data classification
- Support account security
- Support data-loss protection
- Design Purview solution
- Evolve Purview solution
- Manage Purview daily
- Use O365 ServiceNow
General skills
- Recent experience as a Medior IT Security Analyst, with the most recent experience this year.
- Dutch: professional working proficiency.
- English: professional working proficiency.
- French: native or bilingual proficiency.
- Ability to adapt communication to explain technical concepts to non-technical stakeholders.
- Ability to organize daily travel to different clients in the Brussels region efficiently and punctually.
Technical skills
- Azure: beginner level; most recent experience 1 to 3 years ago.
- Data Management System (MDM): intermediate level; most recent experience this year.
- MAM policy: intermediate level; most recent experience this year.
- Microsoft Active Directory (AD): intermediate level; most recent experience this year.
- Microsoft Entra ID: intermediate level; most recent experience this year.
- Office 365: intermediate level; most recent experience this year.
- PowerShell scripting: intermediate level; most recent experience 1 to 3 years ago.
- SharePoint: beginner level; most recent experience 1 to 3 years ago.
- Windows Server Management: intermediate level; most recent experience 1 to 3 years ago.
- Experience implementing and operating incident detection and response solutions.
- Experience automating incident detection or response processes.
- Experience with data classification and protection and implementing related policies.
- Experience optimizing a security platform such as Microsoft Defender or equivalent.
- Experience and approach in vulnerability management.
- Experience reducing the attack surface of a Microsoft 365 or Azure environment.
- Experience implementing and administering MDM and MAM policies using Microsoft Intune.
Tools
- SIEM and EDR for identifying, analyzing and qualifying security events.
- Microsoft Purview: design, evolution and daily management.
- Office 365 and ServiceNow.
- Microsoft Intune for MDM and MAM policies.
- Microsoft Defender or equivalent security platform.
- Certifications asked about in the questions: Microsoft SC-900, Microsoft SC-500 and CyberArk Certified Trustee.