Senior Security Engineer

NCC Group is hiring a Senior Security Engineer in Rijswijk, Netherlands. Level rates it ; you can apply on NCC Group.

Level's read on this job

Level rates this cybersecurity role Little AI ●○○○: aI is not part of the work.
The posting mentions Microsoft Sentinel, Logic Apps and Power Automate among its tools and skills.
Level classes it as a senior role.
NCC Group has 89 other open roles on Level.

AI in this role

Design and deliver Microsoft security solutions, Sentinel detection, and SOAR automation as a Senior Security Engineer.

Microsoft SentinelLogic AppsPower AutomatePowerShellGitTerraform

cyber-securitysoarxdrthreat-huntingkql

Do you enjoy turning complex security data into intelligent, automated defence? At Fox-IT (part of NCC Group), you’ll help leading organisations across the Netherlands strengthen their security posture using Microsoft’s security ecosystem.

You’ll design and deliver Sentinel-led detection and response, build smart SOAR automation, and shape XDR strategies that drive real impact. This is hands-on consultancy work in a collaborative environment that values innovation, knowledge sharing, and high-quality delivery.

Key Responsibilities

Microsoft Sentinel engineering:
Design, deploy and optimise Sentinel environments, including data connectors, normalisation, analytics rules, UEBA, watchlists, workbooks, and cost-conscious ingestion strategies

Automation & SOAR:
Develop and implement pragmatic SOAR playbooks using Logic Apps and Power Automate to reduce manual effort and improve response times

XDR implementation:
Deploy and optimise Microsoft Defender XDR across endpoints, identity, email, and cloud. Align detections with MITRE ATT&CK and relevant threat scenarios

Threat hunting & response:
Use KQL for proactive threat hunting, support incident triage, and continuously improve detection use cases in collaboration with SOC teams

Data protection & compliance:
Advise on Microsoft Purview, Information Protection, and DLP, supporting clients from design through to implementation and rollout

Client delivery:
Translate technical solutions into business value through roadmaps, reporting, and stakeholder communication
Knowledge sharing:
Support and mentor colleagues, contribute to reusable assets, and share best practices within Fox-IT
Business development:
Support pre-sales activities, including scoping, proposals, and advising clients on security strategy

Skills, Knowledge & Expertise

Strong experience delivering Microsoft Security solutions, including:

Microsoft Sentinel (essential)
Microsoft Defender XDR
SOAR (Logic Apps / Power Automate)
Purview / DLP
Solid skills in KQL, scripting (PowerShell), and version control (Git)
Experience with cost optimisation in Azure (ingestion, retention, table selection)

Proven Consulting Capability:

Client workshops
Architecture design
Stakeholder management
Clear and structured reporting
Understanding of security standards and frameworks (ISO 27001, NIST, GDPR) within a cloud context

Language requirement: Professional fluency in Dutch and English (written and spoken)

Nice-to-have Skills:

Infrastructure as Code (ARM, Bicep, Terraform)
Entra ID and Conditional Access
Microsoft Defender for Cloud, Intune
MITRE ATT&CK mapping
Incident response experience
Certifications such as SC-200, SC-100, CISSP, CISM, ISO 27001

Ways of Working:

Focusing on Clients and Customers.
Working as One NCC.
Always Learning.
Being Inclusive and Respectful.
Delivering Brilliantly.

How we rate this

Senior Security Engineer at NCC Group rates 0 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.

Classification

Little AI. AI is not part of the work.

●●●● Builds AI80 to 100
●●●○ Works on AI60 to 79
●●○○ Uses AI40 to 59
●○○○ Little AI0 to 39

Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.

Key facts

Senior Security Engineer is an open job at NCC Group.
Level rates this role AI Level 1 of 4: Little AI.
The role is based in Rijswijk, South Holland.
The job was posted on October 1, 2026.
Seniority: senior.
Applications are handled by NCC Group. Apply on NCC Group

Prepare for this job

Built from this posting and from similar jobs on Level.

Skills and AI tools this role asks for

Cyber SecuritySoarXdrThreat HuntingKqlMicrosoft SentinelLogic AppsPower Automate

Also common in cybersecurity jobs at this level

Python AWS Google Cloud Kubernetes Java C++

Pay

Typical cybersecurity job: $162k

This posting doesn't list pay. Use the typical cybersecurity figure when pay comes up. See cybersecurity jobs

Questions you could be asked

Tell me about a project where cyber security was part of your work. What did you do?
Tell me about a project where soar was part of your work. What did you do?
Tell me about a project where xdr was part of your work. What did you do?
Tell me about a project where threat hunting was part of your work. What did you do?
Tell me about a project where kql was part of your work. What did you do?

Adapt your resume

List these exact terms on your resume: Cyber Security, Soar, Xdr, Threat Hunting, and Kql. An applicant tracking system matches the wording, not the idea.
Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.

Get your CV reviewed before you apply

Send your CV and the role you want next. Your review arrives by email within 3 days.

Get a free CV review Check your resume with the ATS resume checker