SOC Analyst - The Hague/Hybrid - 32-40h

Want to make your mark on our time? Come work as a SOC Analyst at TNO in The Hague!

• Locatie: The Hague
• Werken op afstand: Hybrid
• Opleidingsniveau: Bachelor; Master
• Uren per week: 32-40 hours/week

About this position

Working at TNO means contributing to research and innovative solutions that truly matter. From accelerating the energy transition and enabling the safe use of AI in healthcare to shaping the future of digital identity and strengthening national security.

As a SOC Analyst within TNO's Security Operations Center (SOC), you will be part of the Infrastructure team. This team consists of professionals responsible for developing, maintaining, and continuously improving TNO’s IT infrastructure and services, including server and storage environments, LAN and WAN networks, workplace services, and digital security.

At TNO, you will have the opportunity to work with some of the latest and most sought-after cybersecurity technologies from day one. This ensures continuous learning and development throughout your career.

What will be your role?

As a SOC Analyst, you are responsible for monitoring, analyzing, and responding to security alerts and incidents within the Security Operations Center. You investigate suspicious activities, contribute to the detection and mitigation of cyber threats, and help continuously improve security operations processes. You will actively participate in enhancing detection rules and detection mechanisms, working closely with colleagues and security specialists to ensure an effective and timely response to emerging threats.

Your responsibilities include:

• Monitoring, analyzing, and investigating security events and alerts.
• Responding to security incidents and contributing to incident response activities.
• Identifying suspicious behavior across systems, networks, and endpoints.
• Improving and fine-tuning detection rules, use cases, and monitoring capabilities.
• Supporting the continuous improvement of SOC processes, techniques, and tooling.
• Collaborating with infrastructure, security, and other specialist teams to strengthen TNO's cybersecurity posture.

What we expect from you

We are looking for a SOC Analyst with experience in monitoring, analyzing, and handling security alerts and incidents. You have a strong eye for anomalies within systems and networks, work in a structured manner, and actively contribute to strengthening detection and response capabilities within the SOC.

Even if you meet only part of the requirements below, or if you have gained relevant knowledge and experience outside a SOC environment through training, self-study, or hands-on practice, we encourage you to apply.

You bring:

• A demonstrable HBO/Bachelor working and thinking level, preferably supported by a degree in Cybersecurity, Computer Science, or a related field.
• At least two years of experience in a comparable role within a Security Operations Center (SOC).
• A proactive mindset and a genuine interest in continuously developing both yourself and the SOC environment.
• Strong knowledge of security monitoring, incident response, and the improvement of techniques, tools, and processes within security operations.
• Experience with SIEM and log management platforms, such as Splunk and Microsoft Sentinel, as well as knowledge of IDS and Endpoint Detection & Response (EDR) solutions.
• One or more relevant cybersecurity certifications.
• Experience with scripting, automation, and Machine Learning / Large Language Models (ML/LLMs) is considered a plus.
• Excellent command of both Dutch and English, written and spoken.

What you'll get in return

Challenging and varied work with real impact. At TNO, you have significant freedom to shape your own career and professional development. In addition to a gross monthly salary between €3,450 and €5,000 based on full-time employment (40 hours per week) and depending on your knowledge and experience, you will receive a 13th-month payment (8.33%), a flexible benefits budget (5.58% plus €180 per month), and 8% holiday allowance. Including these components, your total monthly compensation can range from approximately €4,000 to €5,800. You will also have extensive opportunities to develop yourself through training courses, education programmes, workshops, and certifications.

TNO offers optional employee benefits, enabling you to tailor your benefits package to match your personal situation. You may also expect:

• An extremely professional, innovative working environment where colleagues are leading experts in their field.
• The opportunity to attend courses, workshops and conferences, and to receive training and coaching based on your needs.
• 33 days annual leave plus a flexible holiday that can be used on a cultural, religious, or otherwise important day of your choosing (on a full-time basis).
• We offer a comprehensive and flexible mobility plan that also includes full compensation for public transportation for commuting and business travel.
• Great social events with your team and other TNO colleagues.
• Flexible working hours, the possibility to work parttime (32 or 36 hours) and the possibility of working from home.
• A good pension scheme.

As you will be working for clients in the domain of defence and security, a Certificate of No Objection issued by AIVD (the Dutch General Intelligence and Security Service) is mandatory. This means you will have to undergo a security screening.