As an Expert Security Analyst, you will take a leadership role within the Security Incident Response Team (SIRT).
Role and ResponsibilitiesYour primary focus will be on high-level security incident response (Cyber, IT, OT, DLP, Physical), threat hunting, and driving strategic security improvements. You will also play a key role in mentoring analysts and shaping the organization’s security posture.
This position requires deep technical expertise, strong analytical skills, and the ability to lead complex security investigations and security improvements.
The Security Incident Response Team (SIRT) operates within the Security Operations Center (SOC) to detect and mitigate security threats in real time. As an Expert security Analyst, you will be responsible for both operational security monitoring and security improvements.
In this role, you will:
Actively monitor security alerts for malicious activity or anomalies, ensuring swift response.
Lead investigations into high-profile, complex, or advanced persistent threats (APTs).
Proactively search for hidden threats and improve detection capabilities.
Correlate data across multiple sources to detect sophisticated attack patterns.
Develop advanced detection techniques and security automation strategies.
Act as an SME (subject matter expert) for SecOps tools and threat domains.
Provide guidance and mentorship to analysts at all levels.
Education and experienceWe seek an experienced security expert with a strategic mindset and a proven ability to handle complex security challenges. The ideal candidate will have:
Bachelor’s or Master’s in Computer Science, Cybersecurity, or related field.
7+ years in advanced cybersecurity roles.
CISSP, GCIH, GCFA, CISM preferred.
SkillsExpertise in Security Monitoring, Log Analysis, and Threat Hunting.
Deep knowledge of a wide range of domains such as Endpoint, Network, OT, Information and Cloud Security.
Strong Leadership & Mentorship Capabilities.
Other InformationThe role may involve shift work or on-call duties to provide 24/7 security coverage.
This position is primarily office-based, with the possibility of remote work.
It is preferred if you possess a valid work permit for the Netherlands.
This position requires access to controlled technology, as defined in the United States Export Administration Regulations (15 C.F.R. § 730, et seq.). Qualified candidates must be legally authorized to access such controlled technology prior to beginning work. Business demands may require ASML to proceed with candidates who are immediately eligible to access controlled technology.
Diversity and inclusionASML is an Equal Opportunity Employer that values and respects the importance of a diverse and inclusive workforce. It is the policy of the company to recruit, hire, train and promote persons in all job titles without regard to race, color, religion, sex, age, national origin, veteran status, disability, sexual orientation, or gender identity. We recognize that diversity and inclusion is a driving force in the success of our company.
Need to know more about applying for a job at ASML? Read our frequently asked questions.