Senior SOC Engineer: Detection & Incident Response Lead

ANVA; Amersfoort; On-site; EUR 90,000 - 120,000; Full time

Job summary

ANVA is seeking a Senior SOC Engineer to build and own our detection and incident response capability. You will define telemetry visibility, tune detections, and lead investigations, working with MDR partners and supporting the ISAE 3000 assurance program.

In this role you will shape the security operations model, own security telemetry across cloud and endpoints, and drive automation and playbooks to mature our cloud-native SaaS platform.

Qualifications

• 7+ years in Security Operations, Incident Response, or Detection Engineering.
• Proven experience creating, testing, and tuning detection logic within SIEM or security data platforms.
• Experience leading incident investigations from scoping through containment and post-incident reporting.
• Experience working with MDR or outsourced SOC partners.

Responsibilities

• Own telemetry coverage across cloud, endpoint, identity, application, and infrastructure log sources.
• Assess and prioritize the detection and response roadmap against a defined threat model.
• Tune MDR-managed and baseline detections to the insurance and fintech threat landscape.
• Develop custom detection logic where coverage gaps exist.
• Balance detection effectiveness against alert fatigue and operational noise.
• Design and maintain incident response playbooks covering unauthorized access, data exfiltration, and breach scenarios.
• Build triage and evidence collection automation.
• Define alert thresholds and escalation criteria used by the MDR partner.
• Lead investigations during security incidents.
• Run tabletop exercises and continuously improve response procedures.
• Own technical controls supporting the ISAE 3000 assurance program
• Support auditors with detection and response-related inquiries
• Develop and hand over operational runbooks and logging standards

Skills

Security Operations

Incident Response

Detection Engineering

SIEM

MDR / SOC

Cloud telemetry

Python / Bash

Tools

CrowdStrike

Elastic Stack

GuardDuty

CloudTrail

IAM

Terraform

Job description

ANVA is seeking a Senior SOC Engineer to build and own our detection and incident response capability. You will define telemetry visibility, tune detections, and lead investigations, working with MDR partners and supporting the ISAE 3000 assurance program.

In this role you will shape the security operations model, own security telemetry across cloud and endpoints, and drive automation and playbooks to mature our cloud-native SaaS platform.