Security Analyst - Incident Response

he Security Incident Response Team (SIRT) operates within the Security Operations Center (SOC) to detect and mitigate security threats in real time. As an Advanced security analyst, you will be responsible for both operational security monitoring and security improvements.

In this role, you will focus on: Incident detection & response

• Security monitoring - Actively monitor security alerts for malicious activity or anomalies, ensuring
• swift response
• Incident analysis - Investigate, prioritize, and respond to security incidents, escalating as needed
• Threat identification - Recognize patterns of attack, correlate related events, and identify indicators of compromise (IoCs)
• Tuning & optimization - Reduce false positives and enhance detection accuracy by refining security monitoring rules

Process & technology improvements

• Tooling enhancements - Implement improvements in SOC security technologies
• Automation & orchestration - Contribute to automating routine security tasks to improve efficiency
• Knowledge sharing & mentorship - Assist in training and mentoring junior analysts to improve team capabilities

We seek a critical thinker and team player with experience in security operations who can analyze security threats and implement improvements proactively. You bring:

• Bachelor’s degree in computer science, information technology, cybersecurity, or equivalent work experience
• 3+ years in security operations, with hands-on experience in SIEM, EDR, and threat detection.
• Preferred certifications include GCIH, GCFA, CISSP, or equivalent, * Strategic thinking - Ability to assess incidents and understand their broader impact
• Technical proficiency - Strong knowledge of threat analysis, vulnerabilities, and security tools.
• Leadership - Ability to mentor junior analysts and drive security enhancements.
• Innovation - Proactively seek opportunities to improve security monitoring and response strategies

Other information

• The role may involve shift work or on-call duties to provide 24/7 security coverage.
• This position is primarily office-based, with the possibility of remote work.
• A Certificate of Good Conduct “Verklaring Omtrent het Gedrag (VOG)” is required for this position.