SOC Analyst – Hybrid (The Hague) — Cybersecurity & Incident Response

TNO; Den Haag; Hybrid; EUR 39,000 - 56,000; Full time

Benefits offered by this job

13th-month salary

Flexible benefits budget

8% holiday allowance

33 days annual leave

Part-time option 32/36 hours

Job summary

TNO in The Hague is seeking a SOC Analyst to monitor and respond to security events within a Hybrid working model. The role focuses on detection, investigation, and improvement of security operations in collaboration with the Infrastructure team.

You will work with SIEM tools (Splunk, Microsoft Sentinel), IDS/EDR solutions, and scripting/automation to strengthen defenses. Dutch and English proficiency is required.

Qualifications

• A demonstrable HBO/Bachelor level in Cybersecurity, CS, or related field.
• At least two years of SOC experience in monitoring and incidents.

Responsibilities

• Monitor, analyze, and investigate security events and alerts in the SOC.
• Respond to security incidents and participate in incident response activities.
• Identify suspicious behavior across systems, networks and endpoints.
• Improve detection rules, use cases, and monitoring capabilities.
• Support continuous improvement of SOC processes, techniques, and tooling.
• Collaborate with infrastructure and security teams to strengthen cybersecurity posture.

Skills

Security monitoring

Incident response

SIEM

Splunk

Microsoft Sentinel

EDR

Dutch & English

Education

HBO/Bachelor degree in Cybersecurity/CS

Tools

Splunk

Microsoft Sentinel

IDS

EDR

Scripting

Automation

ML/LLMs

Job description

TNO in The Hague is seeking a SOC Analyst to monitor and respond to security events within a Hybrid working model. The role focuses on detection, investigation, and improvement of security operations in collaboration with the Infrastructure team.

You will work with SIEM tools (Splunk, Microsoft Sentinel), IDS/EDR solutions, and scripting/automation to strengthen defenses. Dutch and English proficiency is required.