SOC Platform Engineer.
As a SOC Platform Engineer, you focus entirely on engineering: you build smart automations that help the platform enrich incidents, assess them, and handle them independently wherever possible. This gives analysts more time for the complex, truly relevant cases that require human expertise.
You'll join an organization specialized in SOC services for a broad client base. Every automation you develop is deployed for all of those clients at once, so you build with scalability and intelligence in mind.
You're responsible for building, optimizing, and maintaining automations, AI integrations, and detection rules within the SOC services. The organization works with a SOAR platform featuring AI integrations, which unlocks solutions around EDR, NDR, SIEM, and vulnerability management, including through well-known platforms for cloud security, network detection, and SIEM.
What you'll do.
As a Platform Engineer, your daily work includes the following:
- You develop scalable automations and playbooks that enrich incidents with context from external systems;
- You ensure incidents are (partially) analyzed and handled autonomously, and carry out automated response where needed;
- You build cross-correlations that let an analyst see the attack path at a glance;
- You build integrations to connect new source systems to the SOAR platform;
- You safeguard the quality and maintainability of a codebase running in production for all clients;
- You implement automation pipelines to ensure the quality, integrity, and scalability of technical solutions;
- You develop using Infrastructure as Code wherever possible;
- You monitor the threat landscape and implement detection rules and/or preventive measures;
- You develop and maintain use cases, detection rules, playbooks, and automations to identify attack techniques at an early stage.
What the organization offers.
- A salary that matches your experience and expertise: for a mid-level professional, this ranges between €4,000 and €5,000 gross per month, depending on knowledge and experience. With extensive experience and at a senior level, the salary can go up to €7,000 gross per month;
- 25 vacation days based on a 40-hour workweek;
- A pension plan with a reputable insurer;
- Flexible working hours and the option to work in a hybrid setup;
- A personal choice budget equal to 2.5% of your annual salary (including vacation pay), which you can use, for example, for extra vacation days or additional pension savings;
- An allowance arrangement combining travel costs and working from home, depending on where you work;
- Attention to your personal development, where your growth is given concrete shape together with you;
- Budget for field-specific training and/or conference attendance;
- The option to temporarily work from abroad in consultation (workation);
- Other nice extras, such as participation in a tax-advantaged lease bike plan.
What you bring.
You're driven and passionate about your field and enjoy working together in a team. You keep a close eye on new developments and like applying smart technology within the stack, without losing sight of the platform's quality. You thrive on dynamic environments, function well amid change, and can keep a cool head under pressure by setting the right priorities.
To perform this role optimally, it's also helpful if you have:
- A university or college-level work and thinking ability, preferably with a technical IT or IT security background;
- Several years of work experience as a backend developer, DevOps engineer, SOC (detection) engineer, or something similar;
- Knowledge of and hands-on experience with Infrastructure as Code (IaC);
- Knowledge of and hands-on experience with scripting for developing automations;
- Knowledge of and hands-on experience with applying AI in automation, or the drive to quickly master this;
- Hands-on experience with, or interest in learning more about, security platforms such as EDR, NDR, SIEM, or SOAR;
- A good command of Dutch and English, both spoken and written.
Apply now.
Your details go straight into our system — no middlemen, no mailing lists.