Junior SOC Analyst.

Help us build a knowledge SOC

Our Detect business unit delivers Managed Detection & Response built on the full Microsoft Security ecosystem, with solutions such as NDR and OT Security added on top, plus extra log sources such as application logs. The result is holistic, multi-layered monitoring that looks beyond a single layer of a client environment.

We are deliberately building a knowledge SOC: we invest heavily in training and education, and we do more than flag, with first response we step in as fast as we can. You learn to work with the Microsoft Security ecosystem and the broader Azure platform, alongside experienced colleagues who guide your investigation of security incidents. You work hybrid: three days a week with the team in our Zoetermeer office, the rest from home.

What you will do

• Investigate and follow up on security incidents in Microsoft Defender and Microsoft Sentinel, and in the other systems we monitor for clients
• Dig into alerts under the guidance of experienced analysts
• Learn how to follow up on incidents, analyze them and document them
• Help think through better detections and smarter work processes
• Share knowledge with colleagues and actively build your technical skills
• Get to know the SLAs we have with clients on the speed and quality of our service

What you bring

Must have:

• MBO-4 or HBO level of working and thinking, with a genuine interest in cybersecurity
• Basic knowledge of Microsoft environments
• The appetite to learn to work with the Microsoft Security ecosystem and other cybersecurity solutions
• Good command of Dutch and English, spoken and written (B2 level)
• Eager to learn, analytical and precise in your work

Nice to have:

• 1+ years of experience as a system administrator, cloud engineer, network administrator or similar. No experience yet? Apply anyway
• 1+ years of experience following up on incidents in Microsoft Defender and Microsoft Sentinel
• Experience with CrowdStrike Falcon EDR or other Falcon products, given the collaboration with our international SOC
• Ambition to pursue certifications: SC-900, AZ-900 or later SC-200, and vendor-neutral certifications