Senior Security Analyst

What we offer A competitive compensation package, of course.   Time and resources to grow and develop, including a personal development budget and paid leave for learning days, as well as paid access to e-learning resources such as O’Reilly and LinkedIn Learning.  Time to support life outside of work, with enhanced parental leave plus paid leave to care for loved ones and volunteer in local communities.   Work flexibility, where TomTom’ers, in agreement with their manager and team, use both the office and home to focus, collaborate, learn and socialize. It’s all about getting the best out of both worlds – we ask TomTom’ers to come to the office two days a week, and the remaining three are free to be worked in either location. Improve your home office with a setup budget and get extra support with a monthly allowance.  Enjoy options to work from your home country and abroad for a set number of days each year, to visit family and friends, or to simply explore the world we’re mapping.   Take the holidays you want with a competitive holiday plan, plus an extra day off to celebrate your birthday.  Join annual events like our Hackathon and DevDays to bring your ideas to life with talented teammates from around the world.  Become a part of our inclusive global culture and have the chance to collaborate with a diverse community – we have over 80 nationalities at TomTom!  Find out more about our global benefits and enjoy additional local benefits tailored to your location.  Meet your team We're the Information Security Unit. We keep TomTom's data safe, securing product, service, customer and TomTom'er information. In our team, you'll help maintain data privacy and minimize risk wherever possible, ensuring that we continue to run smoothly and make a difference to lives around the world. At TomTom... You’ll help people find their way in the world. In 2004, TomTom revolutionized how the world moves with the introduction of the first portable navigation device. Now, we intend to do it again by engineering the first-ever real-time map, the smartest and most useful map on the planet. Work with a team of 3,300+ unique, curious and passionate problem-solvers. Together, we’ll open up a world of possibilities for car manufacturers, enterprises and developers to help people understand and get closer to the world around them. After you apply Our recruitment team will work hard to give you a meaningful experience throughout your journey with us, no matter the outcome. Your application will be screened closely and you can rest assured that all follow-up actions will be thorough, from assessments and interviews all the way through onboarding. To find out more about our application process, check out our hiring FAQs. TomTom is an equal opportunity employer TomTom is where you can find your place in the world. Every day we welcome, nurture and celebrate differences. Why? Because your uniqueness is what makes you, you. No matter your culture or background, you’ll find your impact at TomTom. Research also shows that sometimes women and underrepresented communities can be hesitant to apply for positions unless they believe they meet 100% of the criteria. If you can relate to this, please know that we’d love to hear from you.

What You'll Do

What you’ll need

Minimum 5+ years working in security practices (CSIRT/SOC experience preferred);

Demonstrable experience of the incident response lifecycle at both technical and procedural level;

Demonstrable experience performing incident response across different operating systems

Ability to quickly solve problems using scripting and automation;

Strong understanding of IT fundamentals across networking, system, and application layers;

Strong understanding of Cloud infrastructure & experience of incident response in cloud environments.

Proven ability to prioritize incoming escalations and requests appropriately using clear communications;

Excellent interpersonal and communication skills in order to share knowledge with peers and to communicate effectively with different stakeholders;

Strong knowledge of Endpoint Detection and Response (EDR) tools for incident analysis;

Expert knowledge of Security Incident & Event Monitoring (SIEM) tools for incident analysis;

Willingness to be part of an on-call rota for out of hours escalations

What’s nice to have