{"id":679438,"url":"https://alion.io/job/on2it-soc-cyber-security-specialist-3","title":"SOC Cyber Security Specialist","company":{"id":174240,"name":"ON2IT","domain":"on2it.net","url":"https://alion.io/company/on2it","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Recruitee","truth_index":{"grade":"B","score":75,"open_postings":3,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Zaltbommel, Netherlands"],"countries":["NL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":52000,"max_usd":106000,"period":"year","method":"role_country_seniority_unknown","sample_n":98},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Defense in Depth","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false},{"name":"Bash","optional":true},{"name":"FortiGate","optional":true},{"name":"Microsoft Defender","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-09-10T13:08:10Z","employer_posted_date":"2026-09-10","last_verified_at":"2026-10-31T17:50:27Z","board_verified":true,"closed_at":null,"days_open":51,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":51},"description":"THE ROLE\nOur customers trust us to keep their networks out of the news. You are the person who makes that true.\nYou analyze what is really happening on a customer's network, decide what matters, and configure the controls that stop the next attempt. You work in our Global Security Operations Center (GSOC) in Zaltbommel, part of a global team that runs 24x7. One shift you untangle a routing problem; on another you segment a customer's network into Protect Surfaces and tune the policy that guards them. Always with prevention as the goal: we stop the incident, not just report it.\nWHAT YOU WILL DO\nAnalyze anomalies, alerts and threats, and decide what is real\n\nFix security issues in routing and networks\n\nConfigure security controls along Zero Trust principles\n\nWork hands-on with protocols like SSH, SSL, HTTPS, SMTP and DHCP\n\nDocument your work so the next colleague hits the ground running\n\nAdvise customers and colleagues, and make complex things simple\n\nWORKING IN SHIFTS\nOur SOC does not close.\nWe work in shifts to ensure 24/7 security for our customers, alongside colleagues in Europe and the US. You will work a rotating pattern:\nTwo morning shifts (06:00 - 14:30)\n\nTwo afternoon shifts (14:00 - 22:30)\n\nTwo night shifts (22:00 - 06:30)\n\nFollowed by 4 days off\n\nHOW WE WORK WITH AI\nAI is built into our service, not bolted on: MDR Detect runs AI-assisted case handling behind our 24x7 human-led GSOC. We also build our own bespoke AI tooling on top of our platform, and the specialists who use it help shape it.\nWe expect you to understand prompting (structure and context change the answer), reuse (turn a repeated prompt into a skill), verification (a model can be confident and wrong) and privacy (know what goes into which tool). Not an expert yet? Curious and honest about the gaps is what matters.\nRequirements\nWHO YOU ARE\nYou pull the thread until you understand it\n\nYou can say \"I don't know yet\" and then go find out\n\nYou care about doing it properly: a sloppy investigation is worse than none\n\nYou can explain a technical problem without making anyone feel stupid\n\nWHAT YOU BRING\nTechnical Foundation\nNetworking at CCNA level\n\nConcepts network segmentation, VPN, NAT, DNS and certificates\n\nSecurity thinking least privilege, defense in depth, and how an attack moves once inside\n\nSystems Windows, macOS and Linux\n\nProtocols the common ones (SSH, SSL, HTTPS, SMTP, DHCP), and the confidence to pick up the rest\n\nCertifications willing to get them. We pay, you study\n\nWays of working\nYou use AI daily and can explain how, not just that you do\n\nYou can use git (clone, branch, commit, merge request) and write Markdown: our runbooks and AI context live in plain text under version control. This is not a developer role\n\nYou respect confidentiality: customer data does not go just anywhere\n\nThe rest\nExcellent English, spoken and written\n\nWilling to join a 24x7 shift rotation\n\nOn-site: this is not a hybrid role, and you live within ~50 minutes of Zaltbommel\n\nPre-employment screening, due to the sensitive nature of the job\n\nNice to have: experience with Palo Alto Strata or Cortex, Microsoft Defender or Fortinet FortiGate; SOC, NOC or managed services experience; Dutch; Python, Bash or similar scripting.\nWHAT WE OFFER\nYou will grow fast, because we make sure of it.\nA clear path Junior to Medior to Senior, with explicit criteria for each step\n\nCutting-edge technology for customers all over the world; no two environments are the same\n\nColleagues who teach and unlimited learning: training, certification and the time to do it\n\n24 vacation days (option to buy more), mobility allowance, shift compensation, catered lunch\n\nOur customers are hospitals, research labs, retailers, banks and manufacturers. When you catch something early, their operation keeps running and the people who depend on it never notice anything happened. That is the point of the job.\nWant to join the team? Apply now.","description_format":"text","description_chars":3918,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Netherlands","iso":"NL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Incident Response","Managed Security"],"lifecycle":[{"event":"open","at":"2026-09-10T23:19:13Z"}],"visa":[],"liveness":{"score":16,"band":"cold","label":"Long shot","p_open":1,"p_active":0.455,"p_room":0.35,"age_days":50,"expected_fill_days":24,"reasons":["conf:3","win:tail"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/on2it-soc-cyber-security-specialist-3","json_url":"https://alion.io/job/on2it-soc-cyber-security-specialist-3.json","meta":{"generated_at":"2026-10-31T18:00:35Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":28190,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":174240},"rest":"https://alion.io/mcp/rest/get_company?id=174240"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fon2it-soc-cyber-security-specialist-3"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fon2it-soc-cyber-security-specialist-3"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fon2it-soc-cyber-security-specialist-3"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/on2it-soc-cyber-security-specialist-3\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fon2it-soc-cyber-security-specialist-3"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":679438}},{"tool":"search_jobs","arguments":{"company":"on2it.net","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":679438},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}