SOC Analyst

Introduction

Hop on board your next job: SOC analyst at Air France-KLM. You'll protect our organisation against cyber incidents, working daily to ensure safer flight operations. This way, you contribute to a well-oiled organisation and unforgettable flights.

What are you going to do?

At the Security Operations Centre (SOC), we have one goal: to protect Air France-KLM by monitoring, detecting and analysing cyber security incidents. An important task: if something goes wrong, it affects the entire flight operation. In our Security Information and Event Management (SIEM), we register all logins, alerts and incidents. If there is any suspicious activity, you and your colleagues immediately spring into action. In case of a crisis situation, you set up a task force with experts from across the organisation. In this crisisteam, you are an important link. 

• you deal with forensic analysis: you store, identify and analyse electronic information to investigate incidents;
• together with your team, you constantly draw up new detection rules to quickly identify suspicious situations;
• you have a lot of contact with internal stakeholders about external threats;
• you are part of the Incident Response Team;
• you will coordinate important issues with our SOC analyst in Toulouse, and other security colleagues worldwide;
• you work with the latest advanced security tools;
• you are the first point of contact for colleagues with questions about cybersecurity. 
   

Where do you land?

You'll work in KLM-AirFrance's Security Operations Centre (SOC), with around 30 colleagues. Half of the team works from Amsterdam, the other half from Toulouse. Your work location is Schiphol-Rijk: where from behind your desk you can see the planes take off and land. 

Your profile

Cybersecurity is second nature to you, you’re always up to date with the latest developments and enjoy experimenting with cutting-edge tools. Luckily, with us, that’s exactly what you’ll find. As a large organisation with security high on the agenda, we’re constantly innovating. The fast-paced nature of cybersecurity suits you perfectly, as you thrive on the excitement. You remain calm under pressure, are resilient to stress, and know exactly how to handle crisis situations.
Above all, you're a born analyst and enjoy getting to grips with complex issues, you don't stop until you find a solution. 

•    you have completed a college or university degree - preferably in cybersecurity or IT;
•    you speak good Dutch and English;
•    you have worked in cybersecurity for at least three years and have experience with major incidents;
•    you are familiar with SIEM/UEBA, IPS/IDS, EPP/EDR, IAM and forensic analysis tools, among others;
•    you know how to build use cases and playbooks;
•    you like to think along how our internal processes can be better, faster and more efficient.