SOC Analyst - The Hague/Hybrid - 32-40h

About this position

Working at TNO means contributing to research and innovative solutions that truly matter. From accelerating the energy transition and enabling the safe use of AI in healthcare to shaping the future of digital identity and strengthening national security.

As a SOC Analyst within TNO's Security Operations Center (SOC), you will be part of the Infrastructure team. This team consists of professionals responsible for developing, maintaining, and continuously improving TNO’s IT infrastructure and services, including server and storage environments, LAN and WAN networks, workplace services, and digital security. #LI-Hybrid

At TNO, you will have the opportunity to work with some of the latest and most sought-after cybersecurity technologies from day one. This ensures continuous learning and development throughout your career.

What will be your role?

As aSOC Analyst, you are responsible for monitoring, analyzing, and responding to security alerts and incidents within the Security Operations Center. You investigate suspicious activities, contribute to the detection and mitigation of cyber threats, and help continuously improve security operations processes. You will actively participate in enhancing detection rules and detection mechanisms, working closely with colleagues and security specialists to ensure an effective and timely response to emerging threats.

Your responsibilities include:

• Monitoring, analyzing, and investigating security events and alerts.
• Responding to security incidents and contributing to incident response activities.
• Identifying suspicious behavior across systems, networks, and endpoints.
• Improving and fine-tuning detection rules, use cases, and monitoring capabilities.
• Supporting the continuous improvement of SOC processes, techniques, and tooling.
• Collaborating with infrastructure, security, and other specialist teams to strengthen TNO's cybersecurity posture.

What we expect from you

We are looking for a SOC Analyst with experience in monitoring, analyzing, and handling security alerts and incidents. You have a strong eye for anomalies within systems and networks, work in a structured manner, and actively contribute to strengthening detection and response capabilities within the SOC.

Even if you meet only part of the requirements below, or if you have gained relevant knowledge and experience outside a SOC environment through training, self-study, or hands-on practice, we encourage you to apply.

You bring:

• A demonstrable HBO/Bachelor working and thinking level, preferably supported by a degree in Cybersecurity, Computer Science, or a related field.
• At least two years of experience in a comparable role within a Security Operations Center (SOC).
• A proactive mindset and a genuine interest in continuously developing both yourself and the SOC environment.
• Strong knowledge of security monitoring, incident response, and the improvement of techniques, tools, and processes within security operations.
• Experience with SIEM and log management platforms, such as Splunk and Microsoft Sentinel, as well as knowledge of IDS and Endpoint Detection & Response (EDR) solutions.
• One or more relevant cybersecurity certifications.
• Experience with scripting, automation, and Machine Learning / Large Language Models (ML/LLMs) is considered a plus.
• Excellent command of both Dutch and English, written and spoken.

What you'll get in return

Challenging and varied work with real impact. At TNO, you have significant freedom to shape your own career and professional development. In addition to a gross monthly salary between €3,450 and €5,000 based on full-time employment (40 hours per week) and depending on your knowledge and experience, you will receive a 13th-month payment (8.33%), a flexible benefits budget (5.58% plus €180 per month), and 8% holiday allowance. Including these components, your total monthly compensation can range from approximately €4,000 to €5,800. You will also have extensive opportunities to develop yourself through training courses, education programmes, workshops, and certifications.

TNO offers optional employee benefits, enabling you to tailor your benefits package to match your personal situation. You may also expect:

• An extremely professional, innovative working environment where colleagues are leading experts in their field.
• The opportunity to attend courses, workshops and conferences, and to receive training and coaching based on your needs.
• 33 days annual leave plus a flexible holiday that can be used on a cultural, religious, or otherwise important day of your choosing (on a full-time basis).
• An employer working towards a respectful, inclusive, and equitable work environment where every employee can flourish, with various initiatives such as Jong TNO, numerous expertise based guilds, Rainbow Community and Round Tables on diverse inclusion topics.
• We offer a comprehensive and flexible mobility plan that also includes full compensation for public transportation for commuting and business travel.
• Great social events with your team and other TNO colleagues. That’s how you will get to know a lot of people really quickly.
• Flexible working hours, the possibility to work parttime (32 or 36 hours) and the possibility of working from home.
• A good pension scheme.

Read more about tailoring your benefits package.

TNO as an employer

Our people are at the heart of TNO. Their curiosity, expertise and entrepreneurial mindset make it possible to deliver high-impact research and innovations that contribute to society’s sustainable wellbeing and prosperity. That is why we invest in an inspiring and inclusive working environment where colleagues can excel, have autonomy and continue to grow.

Your talent and ambition have every opportunity to flourish at TNO. You work with experts (both within and beyond TNO), have access to advanced technology and the freedom to explore, experiment and innovate. Our strength lies in independence, reliability and collaboration. We find each other in wonder and ingenuity. We are driven to push boundaries. By working with businesses and government, and by connecting different perspectives, we strengthen our innovative capability and create responsible, meaningful results.

At TNO, we believe this is our time to help society, government and business move forward faster. Together with driven colleagues, you turn knowledge into concrete innovations or ventures that truly make a difference by combining the power of science and entrepreneurship. And in doing so, you make your mark on our time.

The selection process

Please apply before the 29th of November, 2026. The selection process comprises two interview rounds. In a final meeting we will discuss the terms of employment and your tailored benefits package. We aim to finalize the entire process within four weeks.

The selection process may include an online assessment and a reference check.

As you will be working for clients in the domain of defence and security, a Certificate of No Objection issued by AIVD (the Dutch General Intelligence and Security Service) is mandatory. This means you will have to undergo a security screening. Read more about security screening.