Medior SOC Analyst
Role Description & Technical Scope
You are the sharp eye that separates real threats from noise. In our SOC, you work with cutting-edge Microsoft Security tech, side by side with threat hunters and incident responders.
DEFION operates an international twin-SOC model. The Dutch SOC focuses on Microsoft Security technologies (Defender, Sentinel, Azure), while the Spanish SOC specializes in CrowdStrike. We are integrating both to protect clients worldwide with combined expertise.
Our SOC is highly technical and pragmatic, with plenty of humor between serious incidents. You will collaborate with analysts, threat hunters, ethical hackers, and DFIR specialists to examine and resolve incidents from multiple angles. This is a hybrid role with on-call rotations for 24/7 client coverage.
What you will do
- Investigate and follow up on security incidents in Microsoft Defender and Microsoft Sentinel
- Interpret alerts and translate them into clear reports and recommended actions for clients
- Contribute to detection improvements, threat intelligence gathering, and playbook tuning
- Support client onboarding and offboarding processes
- Guide junior analysts and collaborate with threat hunters and incident responders across borders
- Actively contribute ideas to make SOC processes smarter, faster, and better
What you bring
Must have:
- Minimum 3 years of experience in a Security Operations Center
- Minimum 3 years of hands‑on incident handling with Microsoft Defender and Microsoft Sentinel
- MBO-4 or HBO level of working and thinking
- Full proficiency in Dutch and English
- Clear communication, structured working style, calm under pressure
Nice to have:
- Basic knowledge of Azure (AZ-900 certification)
- SC-200 and/or SC-900 certification
- Experience with CrowdStrike Falcon EDR (relevant for international SOC collaboration)
What we offer
Why you will love working here
Competitive salary + lease car
Market-competitive salary, lease car or mobility allowance, 24 vacation days.
Close-knit SOC team
A highly skilled team where knowledge sharing is natural and humor is never far away.
Training and certifications
Continuous development opportunities to keep your skills sharp and current.
Real impact
Freedom to work independently and make a genuine difference within a growing MDR service.
Hybrid + free lunch
Flexible hybrid work with modern tools. Free lunch at the office, weekly workout, and a game room.
Social events + study trips
Monthly social events, team outings, and an unforgettable annual study trip.
#J-18808-LjbffrReady to apply for this cyber security position?
This opportunity is hosted on DEFIONhttps://static.whatjobs.com/static/ajCore/img/jobPosting/companyLogo/whatJobs_ob_default.png. Click below to view full details and submit your application.
Key Details
- Date Posted: 23 Oct 2026
- Location: United Kingdom
- Employment: Permanent
- Workplace: Hybrid
- Domain: Professional Services
Need an ATS CV for this role?
Optimize your cyber CV with ATS-friendly templates before submitting your application.
Build Free CV NowEmployer Profile
DEFIONhttps://static.whatjobs.com/static/ajCore/img/jobPosting/companyLogo/whatJobs_ob_default.png
Verified Tech EmployerEnterprise technology firm or security consultancy operating across the UK digital defense ecosystem.
More Jobs at DEFIONhttps://static.whatjobs.com/static/ajCore/img/jobPosting/companyLogo/whatJobs_ob_default.png