SOC Analyst T1

Tasks and Activities

• Incident investigation: performing in‑depth triage and analysis of logs, network traffic, and endpoint data.
• Threat detection: using advanced security tools and techniques to identify and respond to sophisticated cyber threats.
• Incident response: serving as the first line for routine incident and alert analysis, escalating and supporting Tier 2 with more complex cases.
• Working with SOC platforms such as SIEM, SOAR and ITSM to ensure effective service delivery to the customer.
• Documentation and reporting: producing detailed incident reports, including root cause analysis, and delivering clear, comprehensive updates to stakeholders.
• Participation in an on‑call rotation or a 24/7 onsite shift schedule, depending on the assigned SOC.

• A degree in Cybersecurity, Information Technology, or a related field, or equivalent practical experience.
• Cybersecurity knowledge: solid understanding of cybersecurity principles, threat landscapes, and mitigation strategies.
• Proficiency in using advanced security technologies, including SIEM platforms and other cybersecurity tools.
• Ability to use and analyse Endpoint Detection and Response (EDR) tools.
• Background in incident response activities.
• Team collaboration: ability to work effectively with SOC colleagues and cross‑functional teams to ensure smooth and coordinated operations.
• Demonstrate initiative and a proactive mindset to enhance and continuously improve the service.
• Eligible to undergo ESA and EU Secret security clearance procedures.
• Fluent in English both written and spoken; knowledge of French is considered an asset.

• Competitive remuneration packages; unique career opportunities, including working in other countries; personalized training and development programmes; flexible relocation support.

ESA’s premises in Redu, Belgium.