Senior Security Engineer

Senior Security Engineer

Department: Cyber Services and Capabilities

Employment Type: Permanent

Location: NLD Rijswijk

Do you enjoy turning complex security data into intelligent, automated defence? At Fox-IT (part of NCC Group), you’ll help leading organisations across the Netherlands strengthen their security posture using Microsoft’s security ecosystem.

You’ll design and deliver Sentinel-led detection and response, build smart SOAR automation, and shape XDR strategies that drive real impact. This is hands‑on consultancy work in a collaborative environment that values innovation, knowledge sharing, and high‑quality delivery.

Microsoft Sentinel engineering: Design, deploy and optimise Sentinel environments, including data connectors, normalisation, analytics rules, UEBA, watchlists, workbooks, and cost‑conscious ingestion strategies.

Automation & SOAR: Develop and implement pragmatic SOAR playbooks using Logic Apps and Power Automate to reduce manual effort and improve response times.

XDR implementation: Deploy and optimise Microsoft Defender XDR across endpoints, identity, email, and cloud. Align detections with MITRE ATT&CK and relevant threat scenarios.

Threat hunting & response: Use KQL for proactive threat hunting, support incident triage, and continuously improve detection use cases in collaboration with SOC teams.

Data protection & compliance: Advise on Microsoft Purview, Information Protection, and DLP, supporting clients from design through to implementation and rollout.

Client delivery: Translate technical solutions into business value through roadmaps, reporting, and stakeholder communication.

Knowledge sharing: Support and mentor colleagues, contribute to reusable assets, and share best practices within Fox-IT.

Business development: Support pre‑sales activities, including scoping, proposals, and advising clients on security strategy.

Strong experience delivering Microsoft Security solutions, including:

• Microsoft Sentinel (essential)
• Microsoft Defender XDR
• SOAR (Logic Apps / Power Automate)
• Purview / DLP
• Solid skills in KQL, scripting (Power Shell), and version control (Git)
• Experience with cost optimisation in Azure (ingestion, retention, table selection)

Proven Consulting Capability:

• Client workshops
• Architecture design
• Stakeholder management
• Clear and structured reporting
• Understanding of security standards and frameworks (ISO 27001, NIST, GDPR) within a cloud context

Language requirement: Professional fluency in Dutch and English (written and spoken)

• Infrastructure as Code (ARM, Bicep, Terraform)
• Entra  Conditional Access
• Microsoft Defender for Cloud, Intune
• MITRE ATT&CK mapping
• Incident response experience
• Certifications such as SC-200, SC-100, CISSP, CISM, ISO 27001

• Focusing on Clients and Customers.
• Working as One NCC.
• Always Learning.
• Being Inclusive and Respectful.
• Delivering Brilliantly.

What do we offer in return?

We have a high‑performance culture which is balanced evenly with world‑class well‑being initiatives and benefits:

• Flexible Working:
  Balance your work and personal life with our flexible working options.
• Generous Holiday Allowance:
  Enjoy 25 days of holiday, plus bank holidays, with the option to buy up to 5 additional days of annual leave.
• Medicash & Critical Illness Scheme
• Financial & Investment Benefits:
  Enjoy peace of mind with our Pension, Life Assurance, and Share Save Scheme.
• Community & Volunteering Programmes:
  Make a difference in your community with our volunteering opportunities.
• Green Car Scheme:
  Drive green and save money with our eco‑friendly car scheme.
• Cycle Scheme:
  Stay fit and healthy with our cycle‑to‑work scheme.
• Special Time Off:
  Take time off for those big moments in life, like getting married/entering into a civil partnership, becoming a grandparent, and welcoming home a new pet.
• Family Planning:
  Benefit from our generous maternity and paternity leave, as well as time off and support for those undergoing fertility treatments.