Second Line SOC Analyst (Splunk, Sentinel and Detection Engineering) for NATO with security clearance

Second line is where an alert stops being noise and becomes a decision. You would be the technical escalation point in a large defence security operations centre in Mons, Belgium — validating what the first line produces, digging into the cases they cannot close, and building the detections that stop the same thing reaching them twice. What you would be doing Reviewing and validating investigations, supporting first-line analysts so that alert closures, escalations, evidence and notes meet the …