ABOUT THIS POSITION

TNO is a knowledge institute. A unique one. Every day, we work on technological innovations. Working at TNO means contributing to research and innovative applications that matter — from the energy transition and the safe use of AI in healthcare, to the future of digital identity and national security. We collaborate with both Dutch and international governments. This means we handle a lot of sensitive information. Information with major impact. You could call it our crown jewels. And they need to be protected. A complex task, because TNO is highly visible in the digital landscape. We are an attractive target for sophisticated cyberattacks. Internationally. Think of corporate espionage and other forms of cybercrime, conducted by both state actors and criminals. That’s where you come in — as our Security Operations Center (SOC) Lead.

WHAT WILL BE YOUR ROLE?

As SOC Lead, you are responsible for managing the Security Operations Center. This team of five professionals focuses on the detection, analysis, and mitigation of cyber threats. You coordinate incident response, monitor operational processes, and support the team in their daily work. You ensure optimal team collaboration and act as a link between technical specialists and management. You will work closely with the Chief Information Security Officer, who sets the SOC’s strategic direction.
The Security Operations Center is part of the Infrastructure team, a group of professionals dedicated to the development and maintenance of infrastructure and services — including server and storage systems, LAN/WAN networks, workstations, and digital security.
The position is based in The Hague, right next to the central train station. We offer a hybrid work model. From day one at TNO, you’ll get the opportunity to work with the newest and most in-demand technologies on the market, ensuring your continued professional growth.

To be successful in this role, you should recognize yourself in the following profile:

• At least a bachelor’s degree or equivalent working and thinking level (HBO-level).
• Significant experience in a similar leadership role.
• If you have extensive operational experience within a Security Operations Center and are ready to take the next step into a leadership position, we also welcome your application.
• Broad knowledge of threat detection, monitoring, incident response, and improving techniques, tools, and processes within security operations.
• Experience with and technical knowledge of security tools and products such as Azure, Splunk, and EDR.
• At least one of the following certifications: CISM, CISSP, or relevant SANS certification(s).
• Strong command of both Dutch and English