SOC Analyst

IBM; Amsterdam; On-site; EUR 55,000 - 75,000; Full time

Job summary

A global technology company in Amsterdam is looking for a SOC Analyst to join their Cybersecurity Operations team. The role involves monitoring security threats, conducting investigations, and collaborating with various teams to ensure the safety of their environment. Candidates should have a minimum of 3 years of experience in SOC or similar roles, strong problem-solving and communication skills. This position offers an engaging work environment and the opportunity to grow within a worldwide enterprise.

Qualifications

• Minimum 3+ years of experience working within a SOC, Threat Hunt, or Threat Intel team.
• Experience with Linux, Windows and macOS systems.
• Strong written and verbal communication skills.

Responsibilities

• Analyze detections and alerts and respond to security threats.
• Conduct security monitoring activities.
• Document actions in cases for communication to stakeholders.
• Participate in security incidents as a technical expert.

Skills

Critical thinking

Problem-solving

Passion for information security

Strong communication skills

Interpersonal skills

Tools

IBM QRadar SIEM

Windows Defender ATP

Job description

Position

IBM Amsterdam, North Holland, Netherlands

We are looking for an SOC Analyst to join our Cybersecurity Operations team.

Introduction

The IBM CISO SOC in Amsterdam is expanding into a multi‑disciplinary team that protects the IBM organization around the clock against threats both internal and external, with a focus on EU‑located assets and networks. We perform security event detection, response and remediation, working closely with forensic analysts, threat hunters, threat intelligence, and platform engineers. As time is our most valuable resource, automation and tuning are key to avoid investigating the same false positive repeatedly.

Required Professional and Technical Expertise

• Minimum 3+ years of experience working within a SOC, Threat Hunt, or Threat Intel team
• Experience with Linux, Windows and macOS systems
• Critical thinking and problem‑solving skills
• Passion for information security and data security
• Strong written and verbal communication skills
• Strong interpersonal and organizational skills

Preferred Professional and Technical Expertise

• At least 2 years’ experience in Incident Response in a global corporate enterprise
• Experience in fast‑paced investigations
• Experience with programming or scripting languages
• Familiarity with IBM QRadar SIEM, Windows Defender ATP and EDR platforms is a plus

Your Role and Responsibilities

• Security monitoring: analyze detections and alerts and respond to security threats from firewalls, IDS, IPS, AV, EDR and other security threat data sources.
• Conduct security monitoring activities to provide depth visibility into potential known and unknown threats that may pose risk to the IBM environment.
• Document actions in cases to effectively communicate information to internal stakeholders and for historical retrieval.
• Resolve problems independently and understand escalation procedures.
• Participate in security incidents and act as the technical subject‑matter expert during significant incidents.
• Operate cyber‑security incident response technologies, including network logging and forensics, SIEM tools, security analytics platforms, log‑search technologies, and host‑based forensics as applicable.
• Act as an internal information‑security consultant to business and technology units, advising on risks, threats and control practices related to rapid response.
• Assist in development and knowledge sharing within the team.
• Assist in security console tuning.
• Assist in establishing global security monitoring discipline to support the enterprise.
• Identify and share threat intelligence that impacts IBM and its customers or products.