SOC Analyst - Dynamic Cyber Defense & Response

Northwave Cyber Security; Utrecht; On-site; EUR 50,000 - 70,000; Full time

Benefits offered by this job

Modern work equipment

25 vacation days

Pension scheme

Training opportunities

Team events

Job summary

Northwave Cyber Security is seeking a SOC Analyst to manage day‑to‑day security monitoring and first‑line incident handling within our SOC. You will handle alerts, service requests, and client calls, ensuring timely and high‑quality support.

In this role you will work in a fast‑paced security environment, collaborating with a diverse team to investigate incidents, perform vulnerability scans, and continuously improve SOC playbooks and documentation.

Qualifications

• Solid understanding of IT networks, operating systems and security concepts.
• Experience in security operations or incident handling is a plus.
• Certifications such as SC-200 or CompTIA Security+ are desirable.

Responsibilities

• Monitor and analyze security alarms and events from client environments to provide reports.
• Triage alerts based on playbooks, determine impact and urgency.
• Inform clients with clear guidance on next steps and risk mitigation.
• Coordinate with SOC teammates for incidents outside existing playbooks.
• Handle security questions via email or phone.
• Perform vulnerability scans and support remediation follow‑ups.
• Assist other analysts as needed based on expertise.
• Continuously improve SOC processes and playbooks.

Skills

Strong English communication

Independent proactive work

IT basics

SOC/SIEM knowledge

Incident response

Vulnerability management

Industry certifications (SC-200, Sec+)

Tools

SIEM

Job description

Northwave Cyber Security is seeking a SOC Analyst to manage day‑to‑day security monitoring and first‑line incident handling within our SOC. You will handle alerts, service requests, and client calls, ensuring timely and high‑quality support.

In this role you will work in a fast‑paced security environment, collaborating with a diverse team to investigate incidents, perform vulnerability scans, and continuously improve SOC playbooks and documentation.