Security Operations Center – Tier 2 Analyst

What will you be doing

• Perform advanced analysis of escalated security incidents and support investigation efforts.

• Act as an escalation point for Tier 1 analysts andprovideexpert guidance during incident response activities.

• Develop and tune detection rules and use cases in SIEM and other platforms.

• Perform threat hunting based on intelligence and behavioral analysis.

• Conduct forensic analysis and reverse engineering of malware when needed.

• Collaborate with threat intelligence teams to enrich investigations.

• Provide strategic recommendations to improve SOC processes and technologies.

• Mentor junior analysts and contribute to training programs.

• Participate in detection validation and lessonslearned activities to enhance SOC detection and response.

A day in this role:

Monitoring & Detection

• ValidatecomplexalertsescalatedbyTier 1

• Determinescope impact and severity of confirmed incidents.

• Perform deep log analysis forensic investigations and develop custom detection rules.

• Implement containmentmitigationand remediationactions.in accordance with playbooks and customer agreements

• Understanding TTPs (tactics techniques procedures) of threat actors

• Ability to develop custom detection rulesand correlation logic

Investigation & Analysis

• Analyze data patterns and outliers toidentifythreat actor behaviors and insider threats.

• Conduct deep investigations into logs network telemetry and endpoint activity.

• Document findings actions taken and recommended next steps.

Incident Response Support

• Assist the SOC team during active security incidents by collecting evidence andcontaininglowseverity threats as per playbooks.

• Follow established runbooks to ensure consistent and compliant response actions.

• Respond to escalated security incidents requiring advanced analysis.

• Provide containment recommendations and support remediation.

Access Management

• Processing user access requests (add removemodify) following established workflows.

• Enforcing leastprivilege principles and rolebased access standards.

• Conducting periodic access reviews (user accounts permissions group memberships).

• Investigating and escalating suspicious access activities or unauthorized access attempts.
  

Patch Management

• Assistwith tracking and verifying system patch status as part of vulnerability review activities.

• Monitor patchrelated alerts (failed deployments outdated versions) within security tools and coordinate remediation with IT operations.

• Support the vulnerability management process byvalidatingmissing patchesidentifiedduring scans and escalating highrisk findings.
  (This is aligned with Tier 1s documented tasks involving vulnerability scans and reporting.)

Reporting & Communication

• Generate clearaccurateincident reports and daily shift summaries.

• Communicate event details with internal teams in a professional andtimelymanner.

Continuous Improvement

• Recommend improvements to detection rules response processes and SOC procedures.

• Stay current on cyber threat trends attacker techniques (TTPs) and security best practices.

What do we ask from you

Experience:

• 3 years of experience in cybersecurity with at least 2 years in a SOC or IR role.

• Advancedexpertisein SIEM EDR and forensic tools.

• Strong understanding of MITRE ATT&CK framework and threat actor TTPs.

• Experience with scripting and automation (e.g. Python PowerShell).

• Ability to lead and manage incident response efforts under pressure.

• Relevantsecurity certifications from ISC2 or ISACA

• Excellent communication and leadership skills.

Qualifications

• Bachelors degree in IT Cybersecurity or CS

• Certifications such as:

• CompTIA Security

• Microsoft SC-200

• CEHCySA

• GIAC certifications (GSEC GCIH GMON)

• Experience with:

• EDR IDS/IPS and network security tools

• SIEM/SOAR workflows/playbooks

• Threat intelligence platforms

Desired competencies

• Strong analytical and problemsolving skills

• Attention to detail

• Ability to work under pressure during incidents

• Teamfirst mindset and willingness to learn

• Ability to recognize patterns and anomalies

• Prior SOC or IR experience

• Strong analysis and investigation skills

• Familiarity with threat intelligence and adversary behavior

• Ability to perform forensic/log analysis

• More advanced certifications preferred

Important:

• 24/7 SOC environment (shift work may be)

• Fastpaced operational setting with tight response timelines

• Collaboration with crossfunctional IT and security teams

What we offer

In this challenging and responsible position you willhave the chance to make a significant contribution to industry-leading projects and be connected to ourdedicated people and customers. We offer a position in an informal international and professional working environment with a lot of scope for personal development. By joiningour profitable and growing companyyou willbe able to reach your goals and focus on your future.

This position offers a competitive salary range of 4347 to 5900gross per month (excluding 8% holiday allowance). Through exceeding performance expectations you even have the possibility to grow outside this scale.

On top of your fixedsalaryyoullreceive the following secondary benefits:

• 40 vacation days (20 statutory days and a flexible budget worth 20 days).
• Flexible working hours.
• A hybrid workplace (40% working from home and 60% in the office).
• A Health & Wellbeing budget worth 300- per calendar year.
• Commuting allowance including full reimbursement of travel by public transport.
• Working from home allowance.
• Collective pension scheme and discount on additional health insurance.
• On-site company health centres with a gym physiotherapists and occupational therapists.
• Vanderlande Academy and training facilities to boost your skills.
• A variety in Vanderlande Network communities and initiatives.
• And a great company restaurant and coffee bar with barista.

Your application

Are you interested in this position Then apply now directly on our workday vacancy link with your resume and a short summary about your interest in this role.

PS: Due to process compliance we cannot process email applications. Kindly use the correct vacancy link to apply for this vacancy.

Diversity & Inclusion

Vanderlande is an equal opportunity/affirmative action employer. Qualified applicants will be considered without regards to race religion color national origin gender sexual orientation age marital status or disability status.

Background screening

For this position it is possible that a background screening will be conducted. This screening can include checks such as verification of identity qualifications or other relevant records which may include criminal background or sanctions list checks in accordance with our internal policies and applicable laws. Any job offer may be extended under the condition that the screening does not give reason to reconsider the hiring decision. Candidates will always be informed about the process and their rights before any screening is initiated.