> Markdown version of [/jobs/ext/1491845-senior-cyber-security-analyst](https://www.wearedevelopers.com/jobs/ext/1491845-senior-cyber-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Cyber Security Analyst - **Company:** SoftwareOne - **Location:** Amsterdam, Netherlands - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Cloud Computing Security, Cyber Security, Microsoft Security Essentials, Kusto Query Language, Mitre Att&ck, Cybercrime, Microsoft Sentinel, Security Orchestration, Automation & Response - **Published:** July 30, 2026 - **Apply:** https://nl.indeed.com/viewjob?jk=aeb4dbf5c0b3187a ## About the Role * Demonstrated experience in a senior SOC, MDR, or cybersecurity operations role, including the investigation of high-severity security incidents * Proven experience managing customer-facing security incidents and communicating effectively with both technical and non-technical stakeholders * Strong expertise in Microsoft Sentinel, Microsoft Defender XDR, and Kusto Query Language (KQL). * Hands-on experience with incident response, forensic investigations, threat hunting, and the use of threat intelligence to identify and mitigate risks * Knowledge of security automation, SOAR capabilities, cloud security, and identity protection best practices * Excellent analytical, investigative, and problem-solving skills, with the ability to assess complex threats and respond effectively under pressure * Ability to mentor junior analysts, drive continuous improvement initiatives, and contribute to the growth, standards, and scalability of a high-performing SOC * Preferred certifications such as Microsoft SC-200, SC-300, AZ-500, CompTIA CySA+, ITIL Foundation, or CISSP are highly valued ## Description * Keen to be among the first senior analysts building SoftwareOne's Dutch-speaking SOC in Amsterdam and shape security operations for Dutch customers? * Are you passionate about threat hunting, incident response, and helping build a high-performing SOC through mentoring and operational improvement? * Want to join a global Microsoft security leader that offers exciting growth and career development opportunities?, Location: Amsterdam, Netherlands | Work Arrangement: On-site | Reports to: Regional Service Line Delivery Leader- WEMEA | Visa Requirements: Valid working visa for Netherlands | Language Requirements: fluent/professional Dutch and English, written and verbal As a Senior Cyber Security Analyst, you will play a key role in establishing and growing SoftwareOne's Dutch-speaking Security Operations Center (SOC) capability in Amsterdam. You will lead advanced threat investigations, threat hunting activities, and incident response engagements for Dutch customers as part of our Microsoft MDR for Sentinel service. Working closely with customers and the global MDR organization, you will help deliver high-quality security operations while building strong customer relationships. In addition, you will contribute to the development of the SOC by mentoring junior analysts, improving processes, and driving service maturity as the practice expands., * Lead complex security investigations, root cause analyses, and incident response engagements for enterprise customers * Perform advanced threat hunting and analyze attacker behaviors using Microsoft Sentinel, Defender XDR, and the MITRE ATT&CK framework * Develop and optimize detection rules, alert tuning, automation, and SOAR capabilities to strengthen security operations * Support threat intelligence initiatives and continuously improve monitoring and detection effectiveness * Act as the senior escalation point for L1 analysts, providing guidance, mentoring, and technical leadership * Deliver customer-facing incident briefings in Dutch and contribute to Monthly Service Reviews * Help build and scale the Dutch SOC by shaping workflows, governance, and operational processes while onboarding and mentoring future analysts ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)