Senior SOC Analyst

As a Senior SOC Analyst, you are one of the heavyweights in our SOC. You handle complex incidents independently from start to finish and deepen your expertise in your own specialization.

Our Detect business unit delivers Managed Detection & Response built on the full Microsoft Security ecosystem, with solutions such as NDR and OT Security added on top, plus extra log sources such as application logs. The result is holistic, multi-layered monitoring that looks beyond a single layer of a client environment.

You work hands-on every day with the Microsoft Security ecosystem and the other platforms we deploy for our clients. On top of that you have a clear specialization, think Detection Engineering, Threat Hunting, Threat Intelligence or Digital Forensics & Incident Response. Within that specialization you guide and coach medior analysts, and you coach junior analysts in their broader development. You work hybrid, three days a week in our Zoetermeer office, and take part in the on-call rota for 24/7 client coverage.

• Investigate and follow up on complex security incidents, in Microsoft Defender and Microsoft Sentinel and in the other systems we monitor for clients
• Interpret alerts, carry out in-depth analyses and translate them into clear reports with concrete actions
• Independently carry out every type of response action, from initial containment to full resolution
• Improve detections, gather threat intelligence and tune playbooks
• Deepen your expertise in a SOC specialization and guide medior analysts developing in that direction
• Share knowledge, mentor juniors and work with threat hunters and incident responders, including across borders

Must have:

• MBO-4 or HBO level of working and thinking
• At least 5 years of experience in a Security Operations Center
• At least 5 years of experience following up on incidents in Microsoft Defender and Microsoft Sentinel
• In-depth knowledge of the Azure platform
• SC-200, SC-900, AZ-900 and SC-500, or working toward them
• Clear and proactive communication, structured way of working, calm under pressure
• You coach and guide junior and medior analysts in their development
• Good command of Dutch and English, spoken and written (B2 level)

Nice to have:

• SC-100 and vendor-neutral certifications
• Experience with Crowd Strike Falcon EDR or other Falcon products, given the collaboration with our international SOC

Market-competitive salary, mobility and phone allowance, 24 vacation days.

Plenty of technical freedom and responsibility within an MDR service that is still very much developing.

Work on internationally integrated SOC services built on both Microsoft and Crowd Strike.

A close-knit, collegial and technically strong team where sharing knowledge comes naturally.

Hybrid working with modern tools and free lunch at the office.

Monthly social events, team outings and an annual study trip.