Senior SOC Analyst Tier 2

Introduction

Check in for your next career move: SOC Tier 2 analyst at KLM! to protect KLM information system against cyber-attacks. This way, you contribute - directly or indirectly - to a smooth organization and unforgettable flights.

What are you going to do?

Monitor and invest cyber security alerts to identify potential threats. Develop and implement new detection rules and investigation procedures to remain at the state of the art on cyber alert handling. Conduct forensic investigation and recommend containment or remediation measures to block proven attacks. Support training for colleagues to enhance security awareness and skills.

In addition:

• participate in exercises such as pentests and Red/Purple team to evaluate detection and response capabilities;
• help to produce activity indicators and to identify areas of improvement;
• actively contributes to cyber security crisis.

Where do you land?

You will be part of the SOC Level 2 team based in Amsterdam, collaborating closely with the other half of the team in Toulouse. The SOC Level 2 team operates within the IT Operations division of the joint Air France–KLM Group IT organization. The Amsterdam office is located at Point of View, Schiphol-Rijk.

Your profile

Soft Skills

• Mentorship: Skilled in coaching and motivating colleagues to enhance team performance and professional growth;
• Persistence: Focused on identifying and resolving root causes rather than superficial symptoms;
• Ambition: Continuously learning, researching, and applying new security concepts, tools, and techniques.

Hard Skills

• Extensive Experience: Over 10 years of hands-on technical security expertise across diverse environments;
• Web and Network Security: Deep understanding of web application vulnerabilities, network architectures, and defensive controls;
• Incident Response & Threat Hunting: Proven experience leading complex incident investigations, conducting threat hunts, and implementing effective recovery strategies;
• Leadership in Crisis: Capable of managing large-scale security incidents, coordinating cross-functional teams, and driving continuous improvement;
• Strategic Thinking: Maintains a “helicopter view” of security situations, connecting technical details to the broader organizational risk landscape;
• Analytical Insight: Able to identify patterns and correlations that reveal underlying systemic issues, enabling holistic solutions;
• Technical Versatility: Strong understanding of a wide range of security tools and technologies, with the ability to compare, evaluate, and integrate them effectively.

Competencies