Cyber Security Engineer

CBSbutler; Zuid-Holland; Hybrid; EUR 102,000 - 146,000; Full time

Benefits offered by this job

Hybrid working

Job summary

CBSbutler is seeking a Senior Security Analyst to join its Security Operations function in the Western Netherlands. The role blends hands-on security monitoring and incident response with detection engineering and continuous optimisation of security tooling.

You will act as an SME, influence detection strategy, mentor junior analysts and help drive operational excellence in a hybrid, Western Netherlands setting. The position is a 12-month rolling contract paying €90 per hour.

Qualifications

• Experience in Security Operations, Incident Response or Threat Detection environments.
• Hands-on experience with SIEM/EDR technologies; Splunk is highly desirable.
• Understanding of threat analysis, attack methodologies and vulnerability management.
• Experience investigating and responding to complex security incidents.
• Certifications such as GCIH, GCFA or CISSP are advantageous.
• Comfortable in on-call rota or shift-based environments.

Responsibilities

• Monitor and investigate security events across a complex enterprise technology environment.
• Analyse, prioritise and respond to medium/high-severity security incidents.
• Identify attack patterns, correlate events and uncover IoCs.
• Develop, tune and optimise SIEM detection rules to improve coverage and reduce false positives.
• Support the enhancement of security monitoring, automation and orchestration capabilities.
• Contribute to threat detection strategy and continuous improvement initiatives.
• Act as a subject matter expert for specific technologies, threat domains or security processes.
• Mentor junior analysts and drive operational excellence across the team.

Skills

Security Operations

Incident Response

Threat Detection

Detection Engineering

EDR

GCIH GCFA CISSP (advantageous)

On-call readiness

Tools

Splunk

SIEM

Job description

Senior Security Analyst | SOC & SIEM | Western Netherlands | 12 Month Rolling Contract | €90 Per hour

Ready to take your SOC career to the next level?

I'm partnering with a global technology organisation that is continuing to invest heavily in its cyber defence capabilities and is looking to add a Senior Security Analyst to its Security Operations function.

This is a balanced role, combining hands on security monitoring and incident response with detection engineering, process improvement and continuous optimisation of security tooling.

You'll have the opportunity to act as an SME, influence detection strategy and help develop the wider team.

What you'll be doing

• Monitoring and investigating security events across a complex enterprise technology environment
• Analysing, prioritising and responding to medium and high-severity security incidents
• Identifying attack patterns, correlating events and uncovering indicators of compromise (IoCs)
• Developing, tuning and optimising SIEM detection rules to improve coverage and reduce false positives
• Supporting the enhancement of security monitoring, automation and orchestration capabilities
• Contributing to threat detection strategy and continuous improvement initiatives
• Acting as a subject matter expert for specific technologies, threat domains or security processes
• Mentoring junior analysts and helping drive operational excellence across the team

What you'll bring

• Proven experience within Security Operations, Incident Response or Threat Detection environments
• Strong hands on experience with SIEM and EDR technologies, with Splunk experience highly desirable
• Solid understanding of threat analysis, attack methodologies and vulnerability management
• Experience investigating and responding to complex security incidents
• GCIH, GCFA, CISSP or equivalent security certifications are advantageous
• Comfortable participating in an on call rota or shift based operational environment

What's on offer

• 12 month rolling contract
• Opportunity to combine operational security work with detection engineering and strategic improvement initiatives
• Significant influence over security monitoring, tooling and operational processes
• Long term programme within a mature and well funded cyber security environment
• Hybrid working model in Western Netherlands