About the mission
We are looking for a Senior IT Security Engineer to enhance our ability to protect internal systems and those of our clients. The role involves operational security, managing SOC alerts, and ensuring compliance with NIS2 regulations while collaborating with various technical teams.
Read the full description
Context
Digit'Eaux is the reference partner for stakeholders in the water sector in Wallonia for their digital transformation projects, notably supporting SWDE, SPGE, and several Approved Sanitation Organizations (OAA).
Recognized as an essential entity under the NIS2 directive, Digit'Eaux is involved in the design, coordination, and implementation of structuring IT projects covering infrastructure and information security for the entire sector.
In this context, the Cybersecurity division of Digit'Eaux wishes to strengthen its team with an experienced security engineer, responsible for contributing to the protection of information systems for a Walloon intermunicipal organization active in the fields of water (sanitation and drinking water), land use planning, economic development, and renewable energies.
The consultant will join the internal security team and work closely with the technical teams of the concerned cooperative.
Mission
The Senior IT Security Engineer enhances Digit'Eaux's ability to protect its internal systems and those of its clients.
In collaboration with the CISO and the Information Security Officer, he actively participates in operational security (SecOps), optimization of the Security Center (SIEM/EDR), SOC monitoring, as well as hardening and technical review of environments.
The position includes a strong multi-client dimension: configuration, supervision, and securing outsourced infrastructures as part of our MSP activities.
The goal is to improve the overall security posture, contribute to NIS2 compliance, and support the CISO in the technical and organizational activities of the security department.
Main Missions
Operational security (SecOps – Internal & Clients)
Administer, configure, and optimize Security Centers (SIEM, EDR, vulnerabilities).
Manage SOC alert follow-up: qualification, analysis, escalations, coordination with technical teams.
Participate in incident response activities: containment, analysis, remediation, reporting.
Implement and adjust detection rules, dashboards, alerts, and playbooks.
Management and securing of client environments.
Configure and secure clients' technical environments: servers, networks, cloud, firewalls.
Maintain and adjust security tools: EDR, SIEM, IDS/IPS, anti-malware solutions.
Develop security-related projects such as unified vulnerability management.
Apply hardening benchmarks (CIS, ANSSI, NIST).
Conduct technical security reviews of projects and propose remediation plans.
Document architectures, configurations, and security parameters.
Governance & NIS2 compliance.
Contribute to technical risk analyses for internal and client environments.
Participate in drafting and improving policies, procedures, and processes.
Prepare and support audits (internal, client, NIS2).
Produce posture reports, KPIs, security dashboards.
Transversal support & coordination.
Collaborate with systems, network, development, and support teams.
Provide technical security advice in internal and client projects.
Participate, if necessary, in security awareness for teams.
Skills
Soft Skills
Rigor and attention to detail, essential for critical environments.
Analytical mindset, ability to diagnose and resolve complex incidents.
Clarity of communication, both with technical and non-technical profiles.
Autonomy and initiative, ability to prioritize in a multi-client context.
Collaborative spirit, teamwork with the CISO, ISM, and technical teams.
Service orientation, essential for MSP activities and client relations.
Technical Skills (Functional/Management Level)
Very good knowledge of Windows Server / Linux environments.
Mastery of network concepts: firewalls, VLAN, VPN, routing, segmentation.
Experience with EDR/XDR, SIEM, and SOC tools.
Practice of system hardening and benchmarks (CIS, NIST, ANSSI).
Knowledge of Azure / Entra ID / Microsoft 365 / Microsoft Security Center is appreciated.
Understanding of vulnerabilities, CVE, scoring, remediation.
Good mastery of technical documentation.
Experience in multi-client / MSP environments is a major asset.
Language
Perfect command of French and technical English.
Experience
5 to 7 years of experience in a security engineer, SecOps, or security-oriented system/network engineer role.
Proven experience in administering security tools (EDR, SIEM, monitoring).
Experience in incident response or SOC follow-up is desired.
MSP, MSSP, or multi-client experience is highly appreciated.
Proven knowledge of the NIS2 directive, ISO 27001, or equivalent frameworks.
Technical or security certifications are appreciated (MS-500/SC-200, CySA+, CEH, etc.).
What you'll do
- Administer, configure, and optimize Security Centers (SIEM, EDR, vulnerabilities).
- Manage SOC alert follow-up: qualification, analysis, escalations, coordination with technical teams.
- Participate in incident response activities: containment, analysis, remediation, reporting.
- Implement and adjust detection rules, dashboards, alerts, and playbooks.
- Configure and secure clients' technical environments: servers, networks, cloud, firewalls.
- Maintain and adjust security tools: EDR, SIEM, IDS/IPS, anti-malware solutions.
- Develop security-related projects such as unified vulnerability management.
- Conduct technical security reviews of projects and propose remediation plans.
- Document architectures, configurations, and security parameters.
- Contribute to technical risk analyses for internal and client environments.
- Participate in drafting and improving policies, procedures, and processes.
- Prepare and support audits (internal, client, NIS2).
- Produce posture reports, KPIs, security dashboards.
- Collaborate with systems, network, development, and support teams.
- Provide technical security advice in internal and client projects.
- Participate, if necessary, in security awareness for teams.
What we're looking for
- 5 to 7 years of experience in a security engineer, SecOps, or security-oriented system/network engineer role.
- Proven experience in administering security tools (EDR, SIEM, monitoring).
- Experience in incident response or SOC follow-up is desired.
- MSP, MSSP, or multi-client experience is highly appreciated.
- Proven knowledge of the NIS2 directive, ISO 27001, or equivalent frameworks.
- Technical or security certifications are appreciated (MS-500/SC-200, CySA+, CEH, etc.).
Skills
- Windows Server
- Linux
- EDR
- SIEM
- CIS
- NIST
- Azure
- Microsoft 365