SOC Analyst Tier 2 - Junior

Introduction

Step aboard your next job: SOC Analyst at Air France-KLM. You’ll protect our organization from cyber incidents and work daily to ensure safer flight operations. This way, you’ll contribute to a smooth-running organization and unforgettable flights.

What are you going to do?

At the Security Operations Center (SOC), we have one mission: to protect Air France-KLM by monitoring, detecting, and analyzing cybersecurity incidents. A crucial task — if something goes wrong, it affects the entire flight operation. Within our Security Information and Event Management (SIEM) system, we register all logins, alerts, and incidents. If there’s any suspicious activity, you and your colleagues spring into action immediately. In the event of a crisis, you’ll help form a task force of experts from across the organization — and in this crisis team, you play a vital role.

In addition:

• You conduct forensic analysis: preserving, identifying, and analyzing electronic data to investigate incidents;

• You and your team continuously create new detection rules to quickly identify suspicious situations;

• You frequently engage with internal stakeholders about external threats;

• You are part of the Incident Response Team;

• You coordinate with our SOC analysts in Toulouse and other security colleagues worldwide;

• You work with state-of-the-art security tools;

• You are the first point of contact for colleagues with cybersecurity questions.

Where do you land?

You’ll be based in the Air France-KLM Security Operations Center (SOC), working with around thirty colleagues. Half of the team is located in Amsterdam, the other half in Toulouse. Your home base is Schiphol-Rijk — from your desk, you can watch the planes take off and land.

Your profile

Cybersecurity is in your DNA. You know exactly what’s happening in the field and love experimenting with the latest tools. Fortunately, you’ll get that opportunity with us: we’re a large organization where security is a top priority, and innovation is ongoing. A lot happens every day in the world of cybersecurity, and that’s perfect for you — you thrive on a bit of excitement. You stay calm under pressure and know how to act during crises. You’re also a natural analyst who enjoys diving deep into complex issues — you won’t stop until you’ve found a solution.

In addition:

• You’ve completed a bachelor’s or master’s degree, preferably in cybersecurity or IT;

• You speak Dutch and English fluently;

• You have 0–3 years of experience in cybersecurity; experience with major incidents is a plus;

• You are familiar with SIEM/UEBA, IPS/IDS, EPP/EDR, IAM, and forensic analysis tools;

• You know how to build use cases and playbooks;

• You enjoy thinking about how our internal processes can be improved, streamlined, and made more efficient.