Medior SOC analyst (freelance)

For a large organisation, we are looking for a Medior SOC Analyst with experience in Microsoft Sentinel. You will join a professional security team and play an important role in identifying, analysing and following up on potential security incidents.You will work with multiple data sources and security tools to investigate suspicious behaviour and possible threats within the IT environment. You combine strong technical analysis with a practical and structured approach.Responsibilities

• Monitor and analyse security alerts within Microsoft Sentinel
• Perform triage on alerts and potential security incidents
• Investigate suspicious activities, unusual behaviour and possible threats
• Analyse log data from different systems and security sources
• Write and use KQL queries for investigations and detection
• Assess the impact, urgency and potential risks of incidents
• Register, investigate and follow up on security incidents
• Escalate complex incidents to senior analysts or incident response specialists
• Improve and fine tune detection rules, use cases and alerting
• Reduce false positives and improve the quality of security detections
• Support threat hunting and more in depth investigations
• Collaborate with IT operations, engineering teams and other security teams
• Document findings, actions and recommendations
• Contribute to the further improvement of SOC processes and ways of workingRequirements
• Several years of experience as a SOC Analyst or Security Analyst
• Hands on experience with Microsoft Sentinel
• Strong knowledge of KQL
• Experience with security monitoring, incident analysis and alert triage
• Experience analysing log data from multiple sources
• Knowledge of Microsoft Defender products is preferred
• Familiarity with SIEM, incident response and detection processes
• Knowledge of common attack techniques and cyber threats
• Experience with MITRE ATT&CK is preferred
• Able to conduct investigations independently and draw clear conclusions
• Strong analytical skills and a careful and structured way of working
• Good communication skills in EnglishPractical informationStart date: September 2026Duration: Nine months, with the possibility of extensionLocation: Two days per week on siteContract type: Freelance

Our sales consultants each focus on one IT Infrastructure or Cyber Security expertise, one specific type of employment and one particular region. Thanks to this triple focus, they know all relevant organisations within their focus area. As a result, they quickly find your best match.