Senior SOC Analyst

Eye Security•Amsterdam, OH

About The Position

The Senior SOC Analyst participates in complex SOC cases, contributes expertise and practical input to process and efficiency improvements, and supports team and workflow improvement projects. The role requires in-depth operational knowledge of security monitoring tools such as SIEM and EDR, the ability to analyse complex logs and identify actionable patterns, and continued development of technical and interpersonal skills. The analyst serves as a knowledgeable resource within the department. The position operates autonomously during complex SOC escalations, coordinates team responses, guides colleagues on emerging issues, and can handle Tier 3 shifts once fully onboarded. It involves overseeing projects, influencing cross-functional teams, making decisions affecting the department and adjacent areas, and producing clear, reproducible documentation of risks, findings, and recommendations. There are no formal leadership responsibilities, but the analyst coaches junior team members. The role focuses on security alert monitoring and triage, complex escalations, client communication, containment, workload and service-level adherence, mentoring, and identifying systemic detection gaps or false-positive sources for detection content owners. Incident response casework, detection rule ownership, detection engineering, and threat hunting are outside the scope of this role and are handled by separate specialisations or teams. Eye Security provides cybersecurity with embedded cyber insurance solutions for organisations across Europe. Headquartered in the Netherlands, the company has more than 200 employees and is growing internationally. It combines 24/7 detection and response with hands-on incident response to protect SMEs.

Requirements

At least 4 years of hands-on SOC or security operations experience.
Proven ability to independently own and drive team service-level agreements and workload.
Strong client communication skills in high-risk situations.
A track record of mentoring junior colleagues.
Solid log analysis and experience with EDR platforms.
Familiarity with major cloud platforms.
Language fluency appropriate to the supported client base; English is used internally. Dutch and/or German is required or strongly preferred depending on client-facing exposure.
Ability to assess complex logs, recognise patterns, and derive actionable insights.

Responsibilities

Monitor security alerts, perform initial triage, classify alerts as false positive, true positive, or uncertain, and correctly close confirmed false positives.
Take ownership of escalated and complex alerts, including root-cause analysis, log correlation, assessment validation, and determining next steps.
Own client communication for assigned alerts, including difficult or high-risk escalations from junior analysts, to a consistent quality standard.
Independently execute containment actions across impact levels and approve escalations from junior analysts.
Manage the team's overall workload and day-to-day service-level adherence, bringing in support or escalating when targets are at risk.
Answer cross-department questions about security operations and improve documentation and working instructions for junior levels.
Mentor junior and mid-level colleagues.
Identify patterns across cases and escalations that indicate systemic detection gaps or sources of false positives, and provide structured input to detection content owners.
Contribute to team projects and process and efficiency improvements.
Coordinate the team's response during complex SOC escalations and provide guidance to colleagues.
Create clear, structured, reproducible documentation of risks, findings, and recommended actions.