Security Operations Center – Tier 2 Analyst

Vanderlande Industries B.V.; Veghel; On-site; EUR 49,000 - 66,000; Full time

Benefits offered by this job

40 vacation days

Hybrid workplace

Health & Wellbeing budget

Commuting allowance

Pension and health insurance

Job summary

Vanderlande is seeking a Security Operations Center – Tier 2 Analyst to lead complex investigations, coordinate incident response, and improve threat detection and response capabilities. You will serve as an escalation point for Tier 1 analysts and work across customer environments with strong SIEM/EDR, forensic tooling, and MITRE ATT&CK knowledge.

You will develop detection rules, hunt threats, mentor peers, and contribute to playbooks and training programs while maintaining high standards in

Qualifications

• 3+ years in cybersecurity, with 2+ years in a SOC or IR role.
• Advanced expertise in SIEM, EDR, and forensic tools.
• Strong understanding of MITRE ATT&CK and threat actor TTPs.
• Experience with scripting and automation (Python, PowerShell).
• Ability to lead incident response efforts under pressure.
• Certifications from ISC2 or ISACA are preferred.

Responsibilities

• Analyze escalated security incidents and support investigations.
• Escalation point for Tier 1 analysts during incident response.
• Develop and tune detection rules and use cases in SIEM and other platforms.
• Perform threat hunting based on intelligence and behavior.
• Conduct forensic analysis and reverse engineering when needed.
• Collaborate with threat intelligence teams to enrich investigations.
• Mentor junior analysts and contribute to training programs.
• Contribute to detection validation and lessons‑learned activities.

Skills

SIEM

EDR

forensic tools

MITRE ATT&CK

scripting (Python, PowerShell)

incident response leadership

Education

Bachelor’s degree in IT, Cybersecurity, or CS

Tools

EDR

IDS/IPS

SIEM/SOAR

forensic tools

Job description

Job Title Security Operations Center – Tier 2 Analyst

Job Description Introduction As the Security Operations Center – Tier 2 Analyst will lead complex investigations, coordinate incident response efforts, and drive continuous improvement in threat detection and response capabilities. You will serve as a technical expert and escalation point for Tier 1 analysts, customers or other departments. This role supports incident detection, escalation, and response activities within customer environments, in line with agreed SOC service scope and service level agreements (SLAs). You will have had previous experience in handling escalation from Tier 1 and direct work in security monitoring, threat intelligence, or incident response

What will you be doing?

• Perform advanced analysis of escalated security incidents and support investigation efforts.
• Act as an escalation point for Tier 1 analysts and provide expert guidance during incident response activities.
• Develop and tune detection rules and use cases in SIEM and other platforms.
• Perform threat hunting based on intelligence and behavioral analysis.
• Conduct forensic analysis and reverse engineering of malware when needed.
• Collaborate with threat intelligence teams to enrich investigations.
• Provide strategic recommendations to improve SOC processes and technologies.
• Mentor junior analysts and contribute to training programs.
• Participate in detection validation and lessons‑learned activities to enhance SOC detection and response.

A day in this role:

Monitoring & Detection

Validate complex alerts escalated by Tier 1; determine scope, impact, and severity of confirmed incidents. Perform deep log analysis, forensic investigations, and develop custom detection rules. Implement containment, mitigation and remediation actions in accordance with playbooks and customer agreements. Understanding TTPs (tactics, techniques, procedures) of threat actors. Ability to develop custom detection rules and correlation logic.

Investigation & Analysis

Analyze data patterns and outliers to identify threat actor behaviors and insider threats. Conduct deep investigations into logs, network telemetry, and endpoint activity. Document findings, actions taken, and recommended next steps.

Incident Response

Support Assist the SOC team during active security incidents by collecting evidence and containing low‑severity threats as per playbooks. Follow established runbooks to ensure consistent and compliant response actions. Respond to escalated security incidents requiring advanced analysis. Provide containment recommendations and support remediation.

Access Management

Processing user access requests (add, remove, modify) following established workflows. Enforcing least‑privilege principles and role‑based access standards. Conducting periodic access reviews (user accounts, permissions, group memberships). Investigating and escalating suspicious access activities or unauthorized access attempts.

Patch Management

Assist with tracking and verifying system patch status as part of vulnerability review activities. Monitor patch‑related alerts (failed deployments, outdated versions) within security tools and coordinate remediation with IT operations. Support the vulnerability management process by validating missing patches identified during scans and escalating high‑risk findings. (This is aligned with Tier 1’s documented tasks involving vulnerability scans and reporting.)

Reporting & Communication

Generate clear, accurate incident reports and daily shift summaries. Communicate event details with internal teams in a professional and timely manner.

Continuous Improvement

Recommend improvements to detection rules, response processes, and SOC procedures. Stay current on cyber threat trends, attacker techniques (TTPs), and security best practices.

What do we ask from you?

• Experience: 3+ years of experience in cybersecurity, with at least 2 years in a SOC or IR role.
• Advanced expertise in SIEM, EDR, and forensic tools.
• Strong understanding of MITRE ATT&CK framework and threat actor TTPs.
• Experience with scripting and automation (e.g., Python, PowerShell).
• Ability to lead and manage incident response efforts under pressure.
• Relevant security certifications from ISC2 or ISACA.
• Excellent communication and leadership skills.
• Qualifications: Bachelor’s degree in IT, Cybersecurity, or CS.
• Certifications such as: CompTIA Security+, Microsoft SC-200, CEH, CySA+, GIAC certifications (GSEC, GCIH, GMON).
• Experience with: EDR, IDS/IPS, and network security tools.
• SIEM/SOAR workflows/playbooks.
• Threat intelligence platforms.
• Desired competencies Strong analytical and problem‑solving skills.
• Attention to detail.
• Ability to work under pressure during incidents.
• Team‑first mindset and willingness to learn.
• Ability to recognize patterns and anomalies.
• Prior SOC or IR experience.
• Strong analysis and investigation skills.
• Familiarity with threat intelligence and adversary behavior.
• Ability to perform forensic/log analysis.
• More advanced certifications preferred.

What we offer

In this challenging and responsible position, you will have the chance to make a significant contribution to industry‑leading projects and be connected to our dedicated people and customers. We offer a position in an informal, international and professional working environment with a lot of scope for personal development. By joining our profitable and growing company you will be able to reach your goals and focus on your future. This position offers a competitive salary range of € 4347 to € 5900 gross per month (excluding 8% holiday allowance). Through exceeding performance expectations, you even have the possibility to grow outside this scale.

• 40 vacation days (20 statutory days and a flexible budget worth 20 days).
• Flexible working hours.
• A hybrid workplace (40% working from home and 60% in the office).
• A Health & Wellbeing budget worth €300 per calendar year.
• Commuting allowance, including full reimbursement of travel by public transport.
• Working from home allowance.
• Collective pension scheme and discount on additional health insurance.
• On‑site company health centres with a gym, physiotherapists and occupational therapists.
• Vanderlande Academy and training facilities to boost your skills.
• A variety in Vanderlande Network communities and initiatives.
• A great company restaurant and coffee bar with barista.

Working conditions

Important: 24/7 SOC environment (shift work may be required) Fast-paced operational setting with tight response timelines. Collaboration with cross‑functional IT and security teams.

Background screening

For this position it is possible that a background screening will be conducted. This screening can include checks such as verification of identity, qualifications or other relevant records, which may include criminal background or sanctions list checks, in accordance with our internal policies and applicable laws. Any job offer may be extended under the condition that the screening does not give reason to reconsider the hiring decision. Candidates will always be informed about the process and their rights before any screening is initiated.

Diversity & Inclusion

Vanderlande is an equal opportunity/affirmative action employer. Qualified applicants will be considered without regards to race, religion, color, national origin, gender, sexual orientation, age, marital status, or disability status.

Company

Every day, millions of people rely on Vanderlande without even knowing it. From baggage checked in at the airport to parcels on their way to someone’s doorstep, our automation solutions help keep the world moving. Vanderlande designs, delivers, and supports automation technology, operational software, and lifecycle services for leading airports and parcel operations worldwide. Across more than 100 countries, our customers rely on us to keep their operations moving reliably, efficiently, and sustainably. Behind every solution are the people who make it happen. At Vanderlande, how we work matters just as much as what we deliver. Our values, Every Day Better, We Care, and Team Play, guide how we collaborate, support each other, and create value for our customers. Here, you can work with colleagues across disciplines and cultures, contribute to work that makes a difference, and build your future in an organisation that invites you to grow. Explore what is possible at Vanderlande and discover how you can make an impact. Aspire. Grow. Achieve. Together.