Incident Response and SOC Analyst, Sopra Steria

Sopra Steria

Location:
Belgium, Brussels

Category:
IT - Administration

Contract Type:
Employment contract

Salary:

Not provided

Save Job

Apply Position

Job Description:

The role supports the Cyber Security Operations Centre for the EU critical infrastructure, aiming to strengthen IT security through advanced monitoring, detection, and incident response services.

Job Responsibility:

Define incident handling procedures, automation requirements, and playbook logic aligned with the needs
Prepare incident response workflows, automated enrichment steps, and technical documentation for standardized alert handling
Handle cybersecurity incidents from detection through escalation, containment, and resolution
Develop and maintain XSOAR playbooks, integrations, and automations across platforms such as Splunk, AWS, Azure Sentinel, Carbon Black Cloud, and Sysdig
Coordinate and review playbook updates, incident reports, and cross-team collaboration
Report key performance metrics, including FPTP rate, MTTH, escalation rate, automation coverage, time saved, and error reductions
Assist training analysts on playbook usage and incident response methods
Collaborate with CSIRC, CATCH analysts, infrastructure teams, and external stakeholders to validate playbook coverage and share threat intelligence.

Requirements:

Strong incident response methodology and hands-on experience in end-to-end incident handling in multinational settings
Advanced knowledge of XSOAR playbook creation and automation
Proficiency in designing and adapting automated workflows and enrichment
Python programming skills
Ability to present technical and business information effectively to diverse EC stakeholders
High standards for incident documentation, KPI reporting, and compliance with security frameworks
Familiarity with cloud-native services (AWS, Azure), EDR, SIEM-SOAR platforms, and container security
Excellent communication skills for working in multicultural teams and liaising with technical and non-technical audiences
Certifications or experience in relevant security technologies (e.g., Palo Alto Cortex XSOAR, Splunk, Microsoft SC-200, AWS Security Specialty)
Level 6 European Qualification Framework (Bachelor's degree or higher) for senior profiles
Ability to work in international, multicultural environments
Rapid self-starting, teamwork, and multitasking on large projects
Language proficiency: English (B2), French or German a plus
High discretion and integrity.

Nice to have:

French language proficiency
German language proficiency.

What we offer:

Mobility options (including a company car)
Insurance coverage
Meal vouchers
Eco-cheques
Continuous learning opportunities through the Sopra Steria Academy
Participation in team events.

Additional Information:

Job Posted:
November 11, 2025

Employment Type:

Fulltime

Work Type:

On-site work

View All Jobs In This Company

Job Link Share:

Incident Response and SOC Analyst