Medior SOC Analyst

DEFION; Netherlands; Hybrid; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Lease car

Mobility allowance

24 vacation days

Free lunch at the office

Hybrid work

Job summary

DEFION operates a Dutch-based SOC focusing on Microsoft Defender and Sentinel, with an international twin-SOC model for global client protection. You will join a highly technical, pragmatic team that collaborates with threat hunters, DFIR specialists, and analysts across borders in a hybrid role with on-call coverage.

You will investigate incidents, translate alerts into actionable client guidance, and contribute to playbooks and threat intel.

Qualifications

• Minimum 3 years in a Security Operations Center.
• Hands-on incident handling with Microsoft Defender and Microsoft Sentinel.
• MBO-4 or HBO level of working and thinking.
• Full proficiency in Dutch and English.
• Clear communication and structured working style.

Responsibilities

• Investigate and follow up on security incidents in Microsoft Defender and Microsoft Sentinel.
• Interpret alerts and translate them into clear reports and recommended actions for clients.
• Contribute to detection improvements, threat intelligence gathering, and playbook tuning.
• Support client onboarding and offboarding processes.
• Guide junior analysts and collaborate with threat hunters and incident responders across borders.
• Actively contribute ideas to make SOC processes smarter, faster, and better.

Skills

SOC experience

Incident handling

Dutch language

English language

Clear communication

Education

MBO-4 or HBO

Tools

Microsoft Defender

Microsoft Sentinel

Azure

CrowdStrike Falcon EDR

Job description

You are the sharp eye that separates real threats from noise. In our SOC, you work with cutting-edge Microsoft Security tech, side by side with threat hunters and incident responders.

DEFION operates an international twin-SOC model. The Dutch SOC focuses on Microsoft Security technologies (Defender, Sentinel, Azure), while the Spanish SOC specializes in CrowdStrike. We are integrating both to protect clients worldwide with combined expertise.

Our SOC is highly technical and pragmatic, with plenty of humor between serious incidents. You will collaborate with analysts, threat hunters, ethical hackers, and DFIR specialists to examine and resolve incidents from multiple angles. This is a hybrid role with on-call rotations for 24/7 client coverage.

What you will do

• Investigate and follow up on security incidents in Microsoft Defender and Microsoft Sentinel
• Interpret alerts and translate them into clear reports and recommended actions for clients
• Contribute to detection improvements, threat intelligence gathering, and playbook tuning
• Support client onboarding and offboarding processes
• Guide junior analysts and collaborate with threat hunters and incident responders across borders
• Actively contribute ideas to make SOC processes smarter, faster, and better

What you bring

Must have:

• Minimum 3 years of experience in a Security Operations Center
• Minimum 3 years of hands‑on incident handling with Microsoft Defender and Microsoft Sentinel
• MBO-4 or HBO level of working and thinking
• Full proficiency in Dutch and English
• Clear communication, structured working style, calm under pressure

Nice to have:

• Basic knowledge of Azure (AZ-900 certification)
• SC-200 and/or SC-900 certification
• Experience with CrowdStrike Falcon EDR (relevant for international SOC collaboration)

What we offer

Why you will love working here

Competitive salary + lease car

Market-competitive salary, lease car or mobility allowance, 24 vacation days.

Close-knit SOC team

A highly skilled team where knowledge sharing is natural and humor is never far away.

Training and certifications

Continuous development opportunities to keep your skills sharp and current.

Real impact

Freedom to work independently and make a genuine difference within a growing MDR service.

Hybrid + free lunch

Flexible hybrid work with modern tools. Free lunch at the office, weekly workout, and a game room.

Social events + study trips

Monthly social events, team outings, and an unforgettable annual study trip.