Cyber Threat Intelligence & Incident Response Analyst

Make your mark for patients

We are looking for a Cyber Threat Intelligence & Incident Response Analyst who is analytical and proactive to join us in our Cyber Detection and Response team, based in our Anderlecht office in Brussels, Belgium.

About the role

You will be working in a team that helps protect our organization by staying ahead of cyber threats and responding effectively when incidents occur. Your dual mission will involve leading the response to security incidents and advancing a threat intelligence program that delivers actionable insights across the business. You will shape the future of intelligence-led defense strategies, helping to strengthen cyber resilience and mitigate risks across the enterprise.

Who you’ll work with

You will be working in a team that collaborates closely with colleagues in the Security Operations Center, detection engineering, platform engineering, and compliance. Together, you will ensure threat intelligence is operationalized, incidents are managed effectively, and the wider business is informed about evolving threats. You’ll also be engaged with external threat intelligence networks and industry partners to stay ahead of emerging cyber risks.

What you’ll do

• Investigate and respond to cyber incidents alongside IT and Security Operations teams


• Lead technical response activities including containment, recovery, and post-incident analysis


• Develop and own the threat intelligence strategy in partnership with team leadership


• Monitor external sources for emerging threats targeting the pharmaceutical industry


• Create and distribute threat intelligence reports, indicators, and actor profiles


• Leverage automation and language models to enrich and structure intelligence data


• Collaborate with engineers to integrate intelligence into detection and response systems


• Support proactive threat hunting using internal telemetry and intelligence insights

Interested? For this role we’re looking for the following education, experience and skills

• At least 3+ years of experience in cyber threat intelligence, incident response, or similar roles


• Strong technical knowledge of SIEM, endpoint detection, and threat intelligence platforms


• Familiarity with the MITRE ATT&CK framework and structured threat intelligence standards


• Hands-on experience using natural language processing or automation for intelligence workflows


• Ability to create clear, actionable intelligence for technical and business audiences


• Experience in regulated industries or knowledge of malware, scripting, or adversary emulation is a plus

Are you ready to ‘go beyond’ to create value and make your mark for patients? If this sounds like you, then we would love to hear from you! 

About us 
UCB is a global biopharmaceutical company, focusing on neurology and immunology. We are around 8,500 people in all four corners of the globe, inspired by patients and driven by science. 

Why work with us? 
At UCB, we don’t just complete tasks, we create value. We aren’t afraid to push forward, collaborate, and innovate to make our mark for patients. We have a caring, supportive culture where everyone feels included, respected, and has equal opportunities to do their best work. We ‘go beyond’ to create value for our patients, and always with a human focus, whether that’s on our patients, our employees, or our planet. Working for us, you will discover a place where you can grow, and have the freedom to carve your own career path to achieve your full potential. 

UCB is an equal opportunity employer. All employment decisions will be made without regard to any characteristic protected by applicable laws.
 
Should you require any adjustments to our process to assist you in demonstrating your strengths and capabilities contact us on [email protected]. Please note should your enquiry not relate to adjustments; we will not be able to support you through this channel.