Senior SOC Analyst.

Technical depth, sharp analytical skill

Our Detect business unit delivers Managed Detection & Response built on the full Microsoft Security ecosystem, with solutions such as NDR and OT Security added on top, plus extra log sources such as application logs. The result is holistic, multi-layered monitoring that looks beyond a single layer of a client environment.

You work hands-on every day with the Microsoft Security ecosystem and the other platforms we deploy for our clients. On top of that you have a clear specialization, think Detection Engineering, Threat Hunting, Threat Intelligence or Digital Forensics & Incident Response. Within that specialization you guide and coach medior analysts, and you coach junior analysts in their broader development. You work hybrid, three days a week in our Zoetermeer office, and take part in the on-call rota for 24/7 client coverage.

What you will do

• Investigate and follow up on complex security incidents, in Microsoft Defender and Microsoft Sentinel and in the other systems we monitor for clients
• Interpret alerts, carry out in-depth analyses and translate them into clear reports with concrete actions
• Independently carry out every type of response action, from initial containment to full resolution
• Improve detections, gather threat intelligence and tune playbooks
• Deepen your expertise in a SOC specialization and guide medior analysts developing in that direction
• Share knowledge, mentor juniors and work with threat hunters and incident responders, including across borders

What you bring

Must have:

• MBO-4 or HBO level of working and thinking
• At least 5 years of experience in a Security Operations Center
• At least 5 years of experience following up on incidents in Microsoft Defender and Microsoft Sentinel
• In-depth knowledge of the Azure platform
• SC-200, SC-900, AZ-900 and SC-500, or working toward them
• Clear and proactive communication, structured way of working, calm under pressure
• You coach and guide junior and medior analysts in their development
• Good command of Dutch and English, spoken and written (B2 level)

Nice to have:

• SC-100 and vendor-neutral certifications
• Experience with CrowdStrike Falcon EDR or other Falcon products, given the collaboration with our international SOC