Senior soc engineer Vacatures

Over de vacature

Introduction

Solliciteer (door op de betreffende knop te klikken) na het doornemen van alle gerelateerde vacature-informatie hieronder.

ANVA has developed a new multi-tenant SaaS contract management platform for insurers, combining new technology with fifty years of domain expertise. Security is a strategic investment at ANVA as we continue to scale our cloud-native SaaS platform in a highly regulated industry.

We are looking for a SOC Engineer to build and own ANVA's detection and incident response capability from the ground up. This role focuses on building monitoring capabilities, detections, automation, and response playbooks.

Your Impact

As a Senior SOC Engineer, you will define and implement the future of detection engineering and incident response across ANVA. You will own telemetry visibility, build and tune detections, lead incident investigations, develop automation, and serve as the primary technical expert on monitoring and response. Working directly with the IT Security Lead, you will have significant autonomy and influence over the security direction of the company.

You will own the build-out of our detection engineering and incident response capability, working alongside our managed detection and response (MDR) partner and supporting the technical controls behind our ISAE 3000 assurance program.

Rather than inheriting someone else's security operations model, you will define it yourself. Within two years, you will be able to look at a mature detection and response capability and confidently say: _"I built that."_

Your Key Responsibilities

Detection & Visibility

Own telemetry coverage across cloud, endpoint, identity, application, and infrastructure log sources
Assess and prioritize the detection and response roadmap against a defined threat model
Tune MDR-managed and baseline detections to the insurance and fintech threat landscape
Develop custom detection logic where coverage gaps exist
Balance detection effectiveness against alert fatigue and operational noise

Incident Response & Automation

Design and maintain incident response playbooks covering unauthorized access, data exfiltration, and breach scenarios
Build triage and evidence collection automation
Define alert thresholds and escalation criteria used by the MDR partner
Lead investigations during security incidents
Run tabletop exercises and continuously improve response procedures

Compliance & Governance

Own technical controls supporting the ISAE 3000 assurance program
Support auditors with detection and response-related inquiries
Develop and hand over operational runbooks and logging standards to IT, Development, and Operations teams
Ensure monitoring controls remain aligned with regulatory and customer expectations

Who Are You?

You are a Security Engineer with:

7+ years of experience in Security Operations, Incident Response, or Detection Engineering
Proven experience creating, testing, and tuning detection logic within SIEM or security data platforms
Experience leading incident investigations from scoping through containment and post-incident reporting
Experience working with MDR or outsourced SOC partners
Strong knowledge of cloud and application telemetry, including AWS environments
Experience with CloudTrail, VPC Flow Logs, GuardDuty, IAM, and identity attack paths
Familiarity with Spring Boot applications and containerized microservices
Experience working with endpoint telemetry across Windows, Linux, and macOS
Knowledge of CrowdStrike, AWS Security Lake, Elastic Stack, or equivalent platforms
Experience with Infrastructure-as-Code and Detection-as-Code approaches
Scripting skills in Python, Bash, or similar languages
Strong communication skills and stakeholder management capabilities
Nice to have: experience with SSDLC and application security tooling such as Aikido, SAST, and SCA platforms

Additional benefits

13th month
8% holiday allowance per year
27,5 vacation days per year based on full-time employment
A premium-free pension, meaning ANVA covers the full pension contribution, allowing you to retain more net income
The option to work from abroad for 4 weeks a year
A budget of € 750 to set up your home work environment
Training and development programs at ANVA's expense
Company-organized events, ranging from karaoke and football tournaments to laser tag
Free coffee, soft drinks, and fruit, plus a partially subsidized lunch by ANVA, with the option to order take away dinner for home.

Soort dienstverband: Fulltime, Parttime, Vaste baan

Salaris: Tot €6.965,00 per maand

Arbeidsvoorwaarden:
Bedrijfsfeesten
Bedrijfsopleiding
Budget voor professionele ontwikkeling
Fietsplan
Gezondheidsprogramma
Kerstpakket
Kosteloos parkeren
Lunchkorting
Mogelijkheid tot promotie
Pensioen
Personeelskorting
Productkorting werknemers
Telefoon van de zaak
Vrijdagmiddagborrel

Screeningsvragen:
Do you live in The Netherlands?
Have you built and ran playbooks?
Do you have experience with Threat Hunting? xvlobhg (Not Threat Modeling)
Have you improved Security Lakes?

Werklocatie: Hybride werken in 3817 Amersfoort

Over de vacature

Overview

In deze rol ben je verantwoordelijk voor het installeren van netwerk- en securitycomponenten en voer je implementaties uit bij nieuwe klanten, remote of op locatie. Je werkt zelfstandig binnen een security-georiënteerd team en schakelt regelmatig met een Senior technisch consultant, Service manager of Solution architect. De functie biedt ruimte voor persoonlijke groei en verdieping in security, met mogelijkheden voor opleidingen en leverancierssessies. Je hebt een klantgerichte instelling en levert proactief vakinhoudelijke kennis en service. Je bent een drijvende kracht achter veilige, betrouwbare oplossingen bij klantvraag en groei.

Arbeidsvoorwaarden / Benefits

• salaris tussen 5.000-6.000 euro
• 25 vakantiedagen
• premievrije pensioenregeling
• leaseauto of mobiliteitsbudget
• hybride werkomgeving
• OpenUp mentale gezondheid en welzijn

Verantwoordelijkheden

• Installeren van netwerk- en securitycomponenten
• Uitvoeren van implementaties bij nieuwe klanten (remote en op locatie)
• Samenwerken binnen een team en met Senior technisch consultant, Service manager of Solution architect
• Betrokken blijven bij projecten en doorontwikkeling van vakkennis

Belangrijkste vereisten

• minimaal 5 jaar relevante werkervaring

• bij voorkeur Cisco CCNP Security of Fortinet NSE7 certificering

• vertrouwd met termen/protocollen zoals 2FA, AAA, ADC, AMP, APT, DDoS, EPP, FGT, IAM, IP, IPS/IDS, ISE, NAC, NOC, NGFW, OTP, SAML, SEG, WAF, PAM, SIEM, SLA, SPI, SOC

• klant- en resultaatgericht, flexibel, accuraat en dienstverlenend

• ambitieus en leergierig; waardeert kennisdeling met collega's

• klantgericht

• flexibel

• accuraat

• 2FA

• AAA

• ADC