Senior SOC Analyst

Defion; Zoetermeer; Hybrid; EUR 65,000 - 90,000; Full time

Benefits offered by this job

Mobility allowance

Phone allowance

24 vacation days

Free lunch

Job summary

Defion is seeking a Senior SOC Analyst who handles complex security incidents end-to-end. You work hands-on daily with Microsoft Defender, Microsoft Sentinel, and Azure, focusing on detection engineering, threat intelligence, or incident response.

You mentor medior and junior analysts, share knowledge, and participate in a 24/7 on-call rotation for client coverage. The role is hybrid, three days a week in Zoetermeer, with involvement in international MDR services.

Qualifications

• 5+ years of experience in a Security Operations Center or similar environment.
• Proven incident follow-up in Microsoft Defender and Microsoft Sentinel.
• Strong knowledge of the Azure platform and related security services.
• Clear, proactive communication and structured working style.
• Coaching or mentoring juniors and medior analysts.

Responsibilities

• Investigate and follow up on complex security incidents in Defender, Sentinel, and other monitored systems.
• Interpret alerts, perform in-depth analyses, and produce actionable reports.
• Independently execute response actions from containment to resolution.
• Improve detections, gather threat intelligence, and tune playbooks.
• Mentor medior and junior analysts and collaborate with threat hunters and IR teams.

Skills

SOC experience

Incident response

Threat hunting

English language

Education

MBO-4 or HBO

Tools

Microsoft Defender

Microsoft Sentinel

Azure platform

Job description

As a Senior SOC Analyst, you are one of the heavyweights in our SOC. You handle complex incidents independently from start to finish and deepen your expertise in your own specialization.

Our Detect business unit delivers Managed Detection & Response built on the full Microsoft Security ecosystem, with solutions such as NDR and OT Security added on top, plus extra log sources such as application logs. The result is holistic, multi-layered monitoring that looks beyond a single layer of a client environment.

You work hands-on every day with the Microsoft Security ecosystem and the other platforms we deploy for our clients. On top of that you have a clear specialization, think Detection Engineering, Threat Hunting, Threat Intelligence or Digital Forensics & Incident Response. Within that specialization you guide and coach medior analysts, and you coach junior analysts in their broader development. You work hybrid, three days a week in our Zoetermeer office, and take part in the on-call rota for 24/7 client coverage.

What you will do

• Investigate and follow up on complex security incidents, in Microsoft Defender and Microsoft Sentinel and in the other systems we monitor for clients
• Interpret alerts, carry out in-depth analyses and translate them into clear reports with concrete actions
• Independently carry out every type of response action, from initial containment to full resolution
• Improve detections, gather threat intelligence and tune playbooks
• Deepen your expertise in a SOC specialization and guide medior analysts developing in that direction
• Share knowledge, mentor juniors and work with threat hunters and incident responders, including across borders

What you bring

Must have:

• MBO-4 or HBO level of working and thinking
• At least 5 years of experience in a Security Operations Center
• At least 5 years of experience following up on incidents in Microsoft Defender and Microsoft Sentinel
• In-depth knowledge of the Azure platform
• SC-200, SC-900, AZ-900 and SC-500, or working toward them
• Clear and proactive communication, structured way of working, calm under pressure
• You coach and guide junior and medior analysts in their development
• Good command of Dutch and English, spoken and written (B2 level)

Nice to have:

• SC-100 and vendor-neutral certifications
• Experience with CrowdStrike Falcon EDR or other Falcon products, given the collaboration with our international SOC

What we offer

Why you will love working here

Competitive salary

Market-competitive salary, mobility and phone allowance, 24 vacation days.

Technical freedom

Plenty of technical freedom and responsibility within an MDR service that is still very much developing.

International SOC services

Work on internationally integrated SOC services built on both Microsoft and CrowdStrike.

Close-knit SOC team

A close-knit, collegial and technically strong team where sharing knowledge comes naturally.

Hybrid + free lunch

Hybrid working with modern tools and free lunch at the office.

Social events + study trip

Monthly social events, team outings and an annual study trip.