SU
SunrunStaff SOC Analyst
Staff SOC Analyst driving advanced threat detection and incident response for Sunrun's security team. Leading complex investigations, mentoring analysts, and improving detection capabilities in a remote setup.
About the role
- Detect, analyse, and respond to complex security incidents using Microsoft Sentinel and Defender XDR
- Lead incident response efforts from triage and containment to post-incident review
- Conduct threat hunting and develop detection logic aligned with MITRE ATT&CK
- Develop and maintain SOC content, including correlation rules, detection logic, and advanced analytics use cases
- Perform malware analysis and conduct reverse engineering to uncover threat behaviors, TTPs, and infrastructure
- Support forensics and vulnerability management with internal and external partners
- Expand security telemetry and visibility across hybrid environments
- Mentor analysts at all levels and drive maturity in processes and tools
Requirements
- Bachelor’s of Master’s degree in Cyber Security, Computer Science, Information Security, or IT Management
- 5+ years of experience in Security Operations, Incident Response, or Threat Detection (Tier 3 level)
- Hands-on experience with Microsoft Sentinel and the Defender XDR stack (Endpoint, Identity, Cloud Apps)
- Skilled in KQL and detection engineering
- Experience with scripting and automation (e.g., Python, PowerShell, or KQL)
- Familiar with MITRE ATT&CK, vulnerability management, and IR best practices
- Strong understanding of Windows, Azure, and network security
- Fluent in Dutch (B2 or higher) and English
- A curious, analytical mindset, calm under pressure, collaborative in action
Benefits
- 8% vakantietoeslag
- 25 vakantiedagen
- 15 roostervrije dagen
- 3 kort verlofdagen per jaar
- Reiskostenvergoeding
- Laptop en iPhone
- 40% korting op uw lidmaatschap van de sportschool
- Kortingen op particuliere verzekering en Microsoft Office
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
BI
Bogaard Group International, Inc.GSOC Analyst
GSOC Analyst focusing on critical events and risk management operations at Netflix. Monitoring global threats and coordinating incident management efforts in a hybrid work setting.
BI
Bogaard Group International, Inc.GSOC Analyst
GSOC Analyst monitoring global events and managing critical incidents for Netflix's security operations. Ensuring timely communication and assessment during major security threats.
AS
A SocietySecurity Operations Center Engineer
Security Operations Center Engineer enhancing security posture via automation and threat hunting. Requires strong experience with SIEM and SOAR platforms and Python scripting.
CA
Credit AcceptanceSecurity Operations Vulnerability Analyst II
Security Operations Vulnerability Analyst II identifying and mitigating security vulnerabilities. Collaborating with teams to ensure timely risk remediation and protection of enterprise systems.
ON
OntinueSOC Analyst
Cyber Defender (SOC Analyst) acts as the key point of contact for major security incidents. Coordinating response efforts and enhancing procedures at a leading AI - powered security partner.
CI
Core Specialty Insurance Holdings, Inc.Junior Security Operations Center Analyst
Junior SOC Analyst at Core Specialty responsible for monitoring and triaging security alerts across IT environment. This role offers hands - on experience in cybersecurity with a fast - paced operational environment.
TN
Transport for NSWSecurity Operations Coordinator – Temporary Opportunity
Security Operations Coordinator overseeing security strategies and managing operations for public safety in NSW. Collaborating with law enforcement and enhancing transport system resilience with flexible work options.
SA
Intern role in Product Security Operations for Salesforce, leading innovative AI - driven security tools and initiatives. Collaborate with experts to enhance security governance and risk management processes.
CH
Security Operations Manager leading colleague safety and security programs at CVS Health. Responsible for managing security risks and operational performance in retail environments.