Senior Cyber Security Analyst

Public sector agencies, utilities and large health systems licence our asset management platform under multi-year contracts. On-call rotates weekly and pays a flat stipend whether or not the pager goes off.

The position:

The previous person in this role moved to another team. This role handles alert triage, phishing investigations and vulnerability tracking for about 3,000 endpoints. Our team is spread across 17 countries. Headquarters is in Utrecht. This is a long-term contractor role, paid monthly in USD. Core hours are 10:00 to 15:00 CET. We talk mostly in Slack and hop on quick calls when something needs discussing.

Job duties:

Report on security awareness training and phishing simulation results. Run vulnerability scans with Tenable Nessus, Qualys or Rapid7 and track remediation with system owners. Document incidents with timeline, impact and root cause. Tune noisy detection rules with the security engineering team. Hand off open cases at shift change with clear notes. Write and update SOC runbooks and playbooks. Review firewall, proxy, VPN and authentication logs for suspicious activity. Help with user access reviews and offboarding audits.

What you need:

5+ years in an SOC, security analyst or IT security role. Clear written communication for incident tickets and reports. Basic scripting in PowerShell or Python. Experience reading Windows Event Logs, Sysmon and Linux logs. CompTIA Security+ or equivalent (or ability to obtain within six months).

Schedule: Monday to Friday, 8:00 AM to 5:00 PM, with occasional after-hours escalations

What we offer:

Annual rate review. Monthly internet allowance. Paid in USD.

We may close the role early, so do not wait too long to apply.

Duration: 3 months. Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Northmoor.