About this role
About Northwave From our head office in Utrecht, we have been providing 24*7 cybersecurity services for more than 17 years. In doing so, we not only look at the technology, but also at the human behavior within the organization and thus provide integrated security services. That's why organizations that take their cyber security seriously like to work with us. We take the complexity of security management off their hands, leaving them in control. We are a fast-growing organization of 250+ employees, which is the market leader in the field of information security. Our 100% self-financed. European company is on a mission to make high-quality, integrated information security accessible to organizations that depend on their digital business. Northwave stands for diversity, inclusivity, quality and long-term relationships.
- The Role As a SOC Analyst, you are responsible for the day-to-day operational security monitoring and first-line incident handling within our Security Operations Center (SOC).
- You handle incoming security alerts, service requests, and calls from our customers, ensuring timely and high‑quality support.
Responsibilities
- Monitor and analyze security alarms and events from client environments to provide comprehensive reports..
- Triage alerts based on established procedures and playbooks, determining impact and urgency.
- Decide when and how to inform clients, providing clear guidance on next steps and risk mitigation.
- Coordinate with other SOC team members when incidents fall outside existing playbooks.
- Handle security-related questions received via email or phone.
- Perform regular vulnerability scans and support remediation follow-up.
- Support other analysts, as needed, based on your expertise and experience.
- Continuously suggest and implement improvements to SOC processes and playbooks.
What you enjoy
- Working in a challenging, fast-paced security environment.
- Collaborating in a team where fun and professionalism go hand in hand.
- Investigating and analysing security incidents and suspicious activity.
- Continuously improving processes, documentation, and playbooks.
- Informing and advising clients about their security risks in a clear way.
- Learning more about SOC operations and cyber security in general.