Senior Security Operations Analyst

Your Opportunity
We are expanding our Security Operations team and looking for a Senior Security Operations Analyst. This is a hands-on role focused on providing operational stability to Mollie through resolving high severity security incidents and running various security operations activities, including threat hunting and analysis of threat intelligence.
You will join a small hybrid SOC team consisting of mid-senior level experts on the Mollie side. Our SOC is going through a fascinating maturity journey at the moment and you will have a lot of opportunities to shine in the area of your preference: either as a technical expert or as an aspiring manager.
From a senior member of the team we expect a contribution in a wide range of security initiatives. We also expect you to make independent and informed decisions on critical security topics. In return you will be able to choose your areas of focus to further develop your skillset.

What you'll be doing

• Respond to security incidents, including collaboration with other internal teams and our MSSP
• Develop and enhance SOC playbooks
• Working with our Security Engineering team to improve our security posture and toolset
• Proactively search for those threats not easily detected by existing use cases
• Define monitoring use cases and develop prototype rules eg in response to intelligence or gaps in defences
• Participates in the incident response out of hours roster
• Cyber Threat Intelligence: Identify potential threats, delivering strategic reports and changes eg use case updates to minimise the impact of the threat. 
• Collaborate with our MSSP and their teams on variety of topics related to SOC activities
• Create reports, dashboards, metrics for Security Operations and present them

What you'll bring

• Strong experience in working within a Security Operations in one or different roles. Your background can be from service provider or in-house.
• Pragmatic and risk aware approach combines with strong customer focus
• In-depth knowledge of security concepts such as cyber-attacks, related TTPs, Threat Vectors, Controls, Risk Management and Incident Response
• In-depth experience with SIEM, EDR, SOAR, TI and SOC Automation development
• Experience working within a DevOps environment and methods, ideally in DevSecOps setup
• Experience with regulatory compliance and information security management frameworks (ISO 27xxx, COBIT, NIST, PCI DSS, GDPR, etc.)
• Working knowledge and preferably experience with cloud based platforms (ideally GCP), Linux,MacOS, Kubernetes, Terraform, Gitlab