SOC Analyst

As a SOC Analyst, you are analytically strong and have a sharp eye for detail. You know how to fathom complex security issues, maintain an overview during incidents, and perform excellently under pressure. Additionally, you are communicatively skilled, both towards colleagues and clients, and you enjoy working within a team to effectively detect, analyze, and combat cyber threats. Furthermore, you have an excellent command of both the Dutch and English languages.

To be able to do this successfully, you have at least:

• HBO (Higher Professional Education) working and thinking level with at least 5 years of work experience, preferably in IT or Cybersecurity.
• Knowledge of Security Monitoring, Threat Intelligence, Threat Hunting, and Incident Response.
• Good knowledge of network protocols, Windows, and Linux.
• Experience with SIEM solutions such as Microsoft Sentinel, Splunk, or Elastic Stack.
• Experience within a SOC; knowledge of scripting and automation (Python, PowerShell, Bash) is a plus.

Of course, as an employer, we also have a lot to offer you. This is what you get from us:

• A gross monthly salary of at least €4,658 and a maximum of €6,814 depending on your work experience, based on 40 hours, excluding 8% holiday allowance.
• Fixed 13th month, part of which you receive monthly and part in January of the following year. Or, you can use it for a FLEX & BOOST goal of your choice! Click here to read more about it
• An annual individual and collective increase in accordance with our CAO
• € 1500 per year in availability budget that you may use at your own discretion for, for example, training, coaching, and courses
• Flexible days off: our colleagues may decide for themselves (in consultation with the manager) how they manage their leave
• A good work-life balance
• Home office workshop to optimally set up your workspace at home, including a mobile phone & laptop, of course
• 50% discount on our products and services, so you can browse the internet, call, and stream affordably
• Good travel expense reimbursement: you receive full reimbursement for your public transport costs or € 0.23 per kilometer if you travel by car. Prefer to come by bike? Then you can claim our bicycle allowance of € 0.40 per kilometer
• Possibility to purchase a lease bike that KPN contributes to monthly (with an indefinite contract): from city bikes to e-bikes and from racing bikes to speed-pedelecs; you choose what you ride
• Excellent pension conditions: a total contribution of 25% of your pensionable salary, of which KPN contributes 17.5% and you 7.5%

Within the System Integrator business unit, you will join the Security Operations Center (SOC) of KPN Security. Together with a team of security professionals, you will work daily on monitoring, analyzing, and investigating cyber threats for a wide range of clients.

Our services focus on increasing the digital resilience of organizations by detecting threats early, advising clients, and continuously improving our security monitoring and detection capabilities.

The Detect & Respond team forms the heart of the 24/7 security operation within Networking & Security Services. From the NOC, SOC, and CSIRT, the team continuously monitors, detects, and combats security threats and disruptions within mission-critical client environments.

As a SOC Analyst, you are responsible for monitoring and analyzing digital security events, through which you play a key role in the early detection of cyberattacks.

Through rapid triage, effective incident response, and expert recovery, the team ensures that the availability, integrity, and confidentiality of systems and networks remain guaranteed.

In doing so, Detect & Respond makes a direct contribution to the digital resilience of organizations that are essential to the Netherlands.

Some of your tasks include:

• Investigating and analyzing detected incidents and suspicious activities and drafting mitigating measures and advice for the client;
• Collecting and documenting evidence and findings according to policies and procedures;
• Researching the threat landscape and enriching investigation and detection logic with threat intelligence;
• Performing structured threat hunting activities;
• Contributing to the development and optimization of detection rules and use cases;
• Collaborating on the development and improvement of security automation and SOAR workflows;
• Continuously improving our detection capabilities and increasing the digital resilience of our clients in close cooperation with the SOC consultants.