> Markdown version of [/jobs/ext/1526363-senior-security-engineer](https://www.wearedevelopers.com/jobs/ext/1526363-senior-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Security Engineer

- **Company:** NCC Group
- **Location:** Rijswijk, Netherlands
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Microsoft Azure, Cloud Computing, Data Security, Microsoft Security Essentials, Windows PowerShell, Kusto Query Language, Scripting, Microsoft Power Automate, Mitre Att&ck, Git, Microsoft InTune, Cybercrime, Bicep, Microsoft Sentinel, Terraform, Software Version Control
- **Published:** July 15, 2026
- **Apply:** https://nl.indeed.com/viewjob?jk=35d126c694291036

## About the Role

Strong experience delivering Microsoft Security solutions, including:

 * Microsoft Sentinel (essential)
 * Microsoft Defender XDR
 * SOAR (Logic Apps / Power Automate)
 * Purview / DLP
 * Solid skills in KQL, scripting (PowerShell), and version control (Git)
 * Experience with cost optimisation in Azure (ingestion, retention, table selection)

Proven Consulting Capability:

 * Client workshops
 * Architecture design
 * Stakeholder management
 * Clear and structured reporting
 * Understanding of security standards and frameworks (ISO 27001, NIST, GDPR) within a cloud context

Language requirement: Professional fluency in Dutch and English (written and spoken)
Nice-to-have Skills:

 * Infrastructure as Code (ARM, Bicep, Terraform)
 * Entra ID and Conditional Access
 * Microsoft Defender for Cloud, Intune
 * MITRE ATT&CK mapping
 * Incident response experience
 * Certifications such as SC-200, SC-100, CISSP, CISM, ISO 27001

## Description

Do you enjoy turning complex security data into intelligent, automated defence? At Fox-IT (part of NCC Group), you'll help leading organisations across the Netherlands strengthen their security posture using Microsoft's security ecosystem.
You'll design and deliver Sentinel-led detection and response, build smart SOAR automation, and shape XDR strategies that drive real impact. This is hands-on consultancy work in a collaborative environment that values innovation, knowledge sharing, and high-quality delivery., Microsoft Sentinel engineering:
Design, deploy and optimise Sentinel environments, including data connectors, normalisation, analytics rules, UEBA, watchlists, workbooks, and cost-conscious ingestion strategies

Automation & SOAR:
Develop and implement pragmatic SOAR playbooks using Logic Apps and Power Automate to reduce manual effort and improve response times
XDR implementation:
Deploy and optimise Microsoft Defender XDR across endpoints, identity, email, and cloud. Align detections with MITRE ATT&CK and relevant threat scenarios

Threat hunting & response:
Use KQL for proactive threat hunting, support incident triage, and continuously improve detection use cases in collaboration with SOC teams
Data protection & compliance:
Advise on Microsoft Purview, Information Protection, and DLP, supporting clients from design through to implementation and rollout

Client delivery:
Translate technical solutions into business value through roadmaps, reporting, and stakeholder communication
Knowledge sharing:
Support and mentor colleagues, contribute to reusable assets, and share best practices within Fox-IT
Business development:
Support pre-sales activities, including scoping, proposals, and advising clients on security strategy


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Back(end) to the Future: Embracing the continuous Evolution of Infrastructure and Code](https://www.wearedevelopers.com/videos/440-back-end-to-the-future-embracing-the-continuous-evolution-of-infrastructure-and-code)
- [How a Small Team Shrank a Microsoft Monorepo by 94%](https://www.wearedevelopers.com/videos/1236-how-a-small-team-shrank-a-microsoft-monorepo-by-94)
- [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security)
- [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Best Companies in the Netherlands: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/193-best-companies-in-the-netherlands-top-25-companies-in-2023)
- [Software Developer Salary in The Netherlands [2023]](https://www.wearedevelopers.com/magazine/217-software-developer-salary-in-the-netherlands-2023)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [The Netherlands – Europe’s powerhouse for software development?](https://www.wearedevelopers.com/magazine/31-the-netherlands-europe-s-powerhouse-for-software-development)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)