SOC Analyst

At a glance

ABN AMRO Clearing Bank (AACB) is a global leader in the domain of clearing, offering access to a wide range of listed instruments on markets across the globe. ABN AMRO Clearing CISO Office is looking for a Security Operations Centre (SOC) Analyst for the Operations and Intelligence (O&I) department. 

Your job

The AACB CISO O&I department is responsible for the daily security operations of ABN AMRO Clearing Bank. Their responsibilities include threat intelligence, vulnerability management, security monitoring, and incident response. The team consists of security professionals located in Sydney, Amsterdam and Chicago. This role is Amsterdam based.  

The global landscape of AACB contains a diverse combination of networking solutions, operating systems, and applications. To perform their daily operations, the team can rely on market leading security tools and technologies like EDR, SIEM, Vulnerability Scanners, etc.  

Working environment

The vacant role contains multiple aspects of work in a Security Operations Centre. The primary focus for this role is on Security Monitoring and Vulnerability Management.  

For Security Monitoring it’s about triaging security alerts and resolving incidents. The alerts are often escalated via our Managed Security Service Provider (MSSP) who provides Tier-1 SOC services to AACB. You will then swiftly perform triage and decide what actions should be done to contain the threat. For the analysis you will have access to several sources such as EDR, Firewalls, endpoints, and application logging. If an alert escalates to a security incident, you either resolve it your self or connect with a team member to resolve it together.  

Within Vulnerability Management you analyse and escalate vulnerabilities. These vulnerabilities are then picked-up by different teams within the organization for them to resolve. When time permits you spend your time on improving the teams’ capabilities, such as improving our tools, processes or other SOC related activities. As an SOC analyst you play a critical role in keeping the company safe by assessing the risk and impact of detected vulnerabilities and security incidents in a highly regulated environment. 

Your profile

• Triage incoming cyber security alerts escalated from our MSSP. 
• Investigate cyber security incidents and work with team members to contain and remediate them. 
• Analyse identified vulnerabilities and escalate them towards specific teams.  
• Support with the implementation of new processes and tooling in the O&I team. 
• Analyse new security threats and validate our controls against them. 
• Guide stakeholders with their questions regarding Security Operations. 

Your profile

• 2+ years’ experience in Vulnerability management or Security monitoring or Incident Response. 
• Basic experience with the incident response life cycle. 
• Demonstrable experience in security operations work.  
• Understanding frameworks such as Cyber Kill Chain, MITRE ATT&CK. 
• Are familiar with Vulnerability Scanner, SIEM, XDR and EDR products.  
• Certifications such as the following would be desirable but not mandatory: GCIH, GDAT, GCDA, GISP, OSDA, CCFR, SC-900, SC-200 
• You take ownership in your work and you are flexible regarding possible standby hours.

We are offering

• The gross monthly salary displayed above is based on a 36-hour work week, including vacation pay and benefit budget.
• The Benefit Budget is 11% of your salary. The Benefit Budget allows you to acquire additional employment benefits. If you make no purchases or reservations in the Benefit Shop in a given month, you are paid one twelfth of your Benefit Budget that month.
• Five weeks of vacation per year. You have the option to purchase an additional four weeks per year.
• Personal development Budget of € 1,000 per year, which you can accumulate up to € 3,000.
• Possibility to work from home (in consultation with your team and depending on your position).
• An annual public transport pass with free public transportation throughout the Netherlands.
• An excellent pension scheme.

Interested?

If you’re interested in applying or would like more information about this position, please contact Peter-Bob Smits, stream lead Operations & Intelligence, by e-mail: Peter-Bob.Smits@abnamroclearing.com.