SOC Process & Capability Analyst

Proactive Technical Limited; Veghel; On-site; EUR 60,000 - 90,000; Full time

Job summary

Proactive Global is seeking a SOC Process & Capability Analyst for the Airports division in Veghel. The role blends process ownership with hands-on SOC activities to improve capabilities, governance, and operational consistency.

You will translate cybersecurity requirements into practical procedures, playbooks, templates, and guidelines while collaborating with IT, OT, and project teams to ensure secure, compliant operations.

Qualifications

• 3-5 years of experience in cybersecurity or a related field
• Strong understanding of SOC operations, workflows, and incident handling practices
• Proven experience in process design, documentation, and operationalization
• Familiarity with security standards (ISO 27001, ISO62443) and global regulations (NIST2, CRA, TSA) and ITIL
• Strong analytical, structuring, and documentation skills
• Bachelor's or Master's degree in a relevant field
• Fluent in English (additional languages are a plus)

Responsibilities

• Develop, document, and maintain SOC processes, procedures, runbooks, and workflows
• Translate cybersecurity policies and legal requirements into practical SOC processes
• Support capability building across SOC disciplines
• Maintain alignment of SOC processes with frameworks and regulatory requirements
• Define process KPIs, metrics, and reporting structures
• Support SOC operations with subject matter expertise and execution of critical activities
• Collaborate with SOC teams to align processes with day-to-day operations
• Participate in incident coordination, escalation support, and investigations
• Embed technical changes in SOC processes with engineering teams
• Support onboarding and stabilization of new SOC capabilities
• Facilitate process training and knowledge transfer
• Map, validate, and maintain end-to-end SOC workflows
• Lead process optimization and improvement initiatives
• Identify gaps, inefficiencies, or risks and propose improvements
• Conduct periodic process reviews and maturity assessments
• Support automation, tooling, and capability scaling

Skills

Cybersecurity

SOC operations

Process design

Documentation

Analytical skills

Stakeholder communication

Education

Bachelor's or Master's degree

Tools

SOAR

SIEM

EDR

Job description

SOC Process & Capability Analyst - Veghel

This vacancy sits in the Airport division and is responsible for designing, implementing, maintaining, and continuously improving cybersecurity processes that enable the Airports Security Operations Center (SOC) to operate efficiently, consistently, and in alignment with the client'sCyber Defence Organisation (CDO) and applicable regulatory requirements.

This role focuses on capability building, process maturity, and operational consistency, ensuring that SOC services, workflows, governance structures, and operational procedures are clearly defined, documented, compliant with legislation, and effectively executed where required.

Your role

This is a hybrid role combining process ownership with operational execution. While this is not a traditional shift based SOC analyst position, the role requires strong operational understanding and hands on involvement in selected SOC activities, particularly where deep process knowledge, coordination, or regulatory context is essential.

You will work closely with SOC leadership, security analysts, incident responders, IT/OT teams, GISO, Legal, and the broader IT and OT delivery teams to translate cybersecurity requirements into practical operational procedures, playbooks, templates, and guidelines. The SOC Process & Capability Analyst is an integral part of the Airports SOC organization.

You will be part of the SOC Services team, responsible for implementing SOC services, transitioning them into operations, and participating hands on in the execution of selected critical SOC activities.

We are looking for a flexible, independent professional who can help shape, operationalize, and mature the Airports SOC and its services. This role combines process ownership with active operational involvement, especially in areas where deep process knowledge, coordination, or regulatory context is required.

What will you be doing

Process Design & Governance

• Develop, document, and maintain SOC processes, procedures, runbooks, and workflows
• Translate cybersecurity policies and legal requirements into practical, implementable SOC processes
• Support capability building across SOC disciplines
• Maintain alignment of SOC processes with relevant frameworks, standards, and regulatory requirements
• Define process KPIs, metrics, and reporting structures
• Support SOC operations with subject matter expertise, training, and execution of selected critical activities

SOC Operations Enablement & Execution

• Collaborate with SOC teams to ensure processes are aligned with day to day SOC operations
• Actively participate in selected SOC operational activities, such as incident coordination, escalation support, vulnerability handling, and complex or non standard investigations
• Work with module and engineering teams to ensure technical changes are properly embedded in SOC processes and workflows
• Support onboarding and stabilization of new SOC capabilities
• Facilitate process training and knowledge transfer within the SOC
• Map, validate, and maintain end to end SOC operational workflows
• Continuous Improvement & Capability Maturity
• Lead SOC process optimization and improvement initiatives
• Identify process gaps, inefficiencies, or risks and propose sustainable improvements
• Conduct periodic process reviews and maturity assessments
• Support automation, tooling, and SOC capability scaling initiatives

Cross Functional Collaboration

• Work closely with IT, OT, Airports Project and Service Delivery, Engineering, and Cyber Architecture teams
• Align SOC process design with secure by design, operational resilience, and regulatory principles
• Partner with project and service management and governance teams to ensure consistent service delivery

Documentation & Communication

• Develop and maintain documentation such as RACI matrices, templates, workflows, and guidelines
• Prepare communication and training materials for process rollouts and operational changes
• Support audits, reviews, and regulatory evidence collection where required

What do we ask from you

Required qualifications

• 3-5 years of experience in cybersecurity or a related field
• Strong understanding of SOC operations, workflows, and incident handling practices
• Proven experience in process design, documentation, and operationalization
• Familiarity with security standards (ISO 27001, ISO62443), Worldwide Security Regulations (NIST2, CRA, TSA) and Service Delivery Standards (ITIL)
• Strong analytical, structuring, and documentation skills
• Bachelor's or Master's degree in a relevant field
• Fluent in English (additional languages are a plus)

Preferred

• Experience operationalizingcybersecurity or service management frameworks
• Knowledge of SOAR, SIEM, and EDR workflows
• Relevant cybersecurity or service management certifications
• Experience in Airports or similar OT heavy environments

Key Competencies

• Structured and detail oriented
• Flexible and willing to help shape the newly established department
• Strong analytical and problem solving mindset
• Process driven with a focus on continuous improvement
• Able to work independently in a dynamic, operational environment
• Strong communicator across technical and non technical stakeholders

Expected Work Environment

• Part of the Airports SOC organization
• Onsite role in Veghel
• Fastpaced, operational security environment
• Occasional travel to other client or customer locations

Proactive Global is committed to equality in the workplace and is an equal opportunity employer.

Proactive Global is acting as an Employment Business in relation to this vacancy.