Expert Security Analyst – Incident Coordinator

ASML Germany GmbH; Netherlands; Hybrid; EUR 85,000 - 125,000; Full time

Job summary

ASML Germany GmbH is seeking an Advance security analyst to join the Security Operations Center. You will monitor security alerts and improve detection and response capabilities across cyber, IT, OT, and DLP domains.

You will act as an SME on security technologies, mentor junior analysts, and drive improvements in security processes and tools. The role may require shift work or on-call duties.

Qualifications

• Bachelor's degree in CS/IT/cybersecurity or equivalent
• 3+ years in security operations with hands-on experience in SIEM, EDR, and threat detection
• Preferred certifications include GCIH, GCFA, CISSP, or equivalent

Responsibilities

• Monitor security alerts across cyber, IT, OT, and DLP to detect malicious activity or anomalies.
• Investigate, prioritize, and respond to security incidents, escalating as needed.
• Tune and optimize detections to reduce false positives and enhance detection accuracy.
• Mentor junior analysts and share knowledge to improve team capabilities.
• Contribute to tooling, automation, and security process improvements.

Skills

Strategic thinking

Technical proficiency

Leadership

Innovation

Education

Bachelor's degree in computer science, information technology, cybersecurity, or equivalent

Tools

SIEM

EDR

Threat detection

Job description

Introduction to the job

As an Advance security analyst, you will take on a balanced role, focusing equally on monitoringsecurity alerts (Cyber, IT, OT, DLP) and enhancing detection and response capabilities. You will beresponsible for primarily focused on analyzing medium-to-high risk incidents, fine-tuning detectionsystems, and executing security improvements. Additionally, you will act as a subject matter expert(SME) for specific security technologies or threat domains.

This role requires a deeper understanding of cyber threats and provides the opportunity to mentorjunior analysts while driving improvements in security processes, tools, and techniques.

Role and responsibilities

he Security Incident Response Team (SIRT) operates within the Security Operations Center (SOC) todetect and mitigate security threats in real time. As an Advance security analyst, you will beresponsible for both operational security monitoring and security improvements.

In this role, you will focus on:

Incident detection & response

• Security monitoring – Actively monitor security alerts for malicious activity or anomalies, ensuring
• swift response
• Incident analysis – Investigate, prioritize, and respond to security incidents, escalating as needed
• Threat identification – Recognize patterns of attack, correlate related events, and identify indicators ofcompromise (IoCs)
• Tuning & optimization – Reduce false positives and enhance detection accuracy by refining securitymonitoring rules

Process & technology improvements

• Tooling enhancements – Implement improvements in SOC security technologies
• Automation & orchestration – Contribute to automating routine security tasks to improve efficiency
• Knowledge sharing & mentorship – Assist in training and mentoring junior analysts to improve teamcapabilities

Education and experience

We seek a critical thinker and team player with experience in security operations who can analyzesecurity threats and implement improvements proactively.

You bring:

• Bachelor’s degree in computer science, information technology, cybersecurity, orequivalent work experience
• 3+ years in security operations, with hands‑on experience in SIEM, EDR, and threatdetection.
• Preferred certifications include GCIH, GCFA, CISSP, or equivalent

Skills

• Strategic thinking – Ability to assess incidents and understand their broader impact
• Technical proficiency – Strong knowledge of threat analysis, vulnerabilities, and security tools.
• Leadership – Ability to mentor junior analysts and drive security enhancements.
• Innovation – Proactively seek opportunities to improve security monitoring and response strategies

Other information

• The role may involve shift work or on-call duties to provide 24/7 security coverage.
• This position is primarily office-based, with the possibility of remote work.

This position requires access to controlled technology, as defined in the United States Export Administration Regulations (15 C.F.R. § 730, et seq.). Qualified candidates must be legally authorized to access such controlled technology prior to beginning work. Business demands may require ASML to proceed with candidates who are immediately eligible to access controlled technology.

Inclusion and diversity

ASML is an Equal Opportunity Employer that values and respects the importance of a diverse and inclusive workforce. It is the policy of the company to recruit, hire, train and promote persons in all job titles without regard to race, color, religion, sex, age, national origin, veteran status, disability, sexual orientation, or gender identity. We recognize that inclusion and diversity is a driving force in the success of our company.