Cyber Security Analyst

SoftwareONE Deutschland GmbH; Amsterdam; On-site; EUR 42,000 - 60,000; Full time

Benefits offered by this job

Training budget

Unlimited vacation

Mobility options

Team events

Job summary

SoftwareOne in Amsterdam is building a Dutch-speaking Security Operations Center to protect enterprise customers through our global MDR service. As the first line of defense, you will monitor, investigate, and respond to security threats using Microsoft Sentinel and Defender, and collaborate with international SOC teams.

The role suits juniors with exposure to SOC, cybersecurity or IT security, and hands-on SIEM experience, plus security certifications.

Qualifications

• Junior experience in SOC, cybersecurity, system administration, or similar IT security role, with exposure to security monitoring and incident handling.
• Hands-on experience with SIEM platforms and security monitoring tools, ideally including Microsoft Sentinel and Microsoft Defender XDR.
• Understanding of security incident response processes and best practices for threat detection, investigation, and escalation.
• Knowledge of Microsoft 365 security technologies, with a basic understanding of networking, cloud security, and identity security concepts.
• Strong analytical and problem-solving skills, with the ability to assess security events and make informed decisions in a fast-paced environment.
• Excellent communication and customer-facing skills; experience working with external customers is considered an advantage.
• Relevant certifications such as SC-200, Security+, MS-900, AZ-900, or ITIL Foundation are preferred

Responsibilities

• Monitor and analyze security events across Microsoft Sentinel and Microsoft Defender environments.
• Perform alert triage, incident classification, and initial investigations to identify threats and determine appropriate response actions.
• Validate security events and elevate incidents to L2/L3 teams when required.
• Serve as a primary point of contact for customers, providing first-response communications in Dutch and supporting security, NIS2, and DORA-related discussions.
• Create and maintain accurate incident documentation, reports, and case records.
• Contribute to the development and continuous improvement of SOC runbooks, playbooks, and operational procedures.
• Help shape the future operating model of the Dutch SOC through service reviews, process improvements, and operational excellence initiatives

Skills

SOC experience

Security monitoring

Incident handling

Microsoft 365 security

Analytical skills

Customer-facing

Communication skills

Education

SC-200 certification

Security+ certification

MS-900 certification

AZ-900 certification

ITIL Foundation

Tools

Microsoft Sentinel

Microsoft Defender XDR

Job description

Why SoftwareOne?

SoftwareOne and Crayon have come together to form a global, AI-powered software and cloud solutions provider with a bold vision for the future. With a footprint in over 70 countries and a diverse team of 13,000+ professionals, we offer unparalleled opportunities for talent to grow, make an impact, and shape the future of technology. At the heart of our business is our people. We empower our teams to work across borders, innovate fearlessly, and continuously develop their skills through world-class learning and development programs. Whether you're passionate about cloud, software, data, AI, or building meaningful client relationships, you’ll find a place to thrive here. Join us and be part of a purpose-driven culture where your ideas matter, your growth is supported, and your career can go global.

The role

• Do you want to be among the first SOC Analysts dedicated to Dutch customers, helping establish a new security operations capability from day one?
• Are you passionate about threat detection, incident response, and working with modern Microsoft security technologies while influencing how a growing SOC operates?
• Ready to join SoftwareOne and be part of a global team driving the future of managed security services?

Practical Information

Location: Amsterdam, Netherlands | Work Arrangement: On-site | Reports to: Regional Service Line Delivery Leader- WEMEA | Visa Requirements: Valid working visa for Netherlands | Language Requirements: fluent/professional Dutch and English, written and verbal

As a Cyber Security Analyst, you will help build SoftwareOne’s new Dutch-speaking Security Operations Center (SOC) capability while protecting enterprise customers through our global MDR service. Acting as the first line of defence, you will monitor, investigate, and respond to security threats using Microsoft Sentinel and the Microsoft Security platform. You will work directly with customers and collaborate with international SOC teams to deliver effective incident response. This is a unique opportunity to shape a growing security operation, influence best practices, and accelerate your cybersecurity career.

Key Responsibilities

• Monitor and analyze security events across Microsoft Sentinel and Microsoft Defender environments
• Perform alert triage, incident classification, and initial investigations to identify threats and determine appropriate response actions
• Validate security events and elevate incidents to L2/L3 teams when required
• Serve as a primary point of contact for customers, providing first-response communications in Dutch and supporting security, NIS2, and DORA-related discussions
• Create and maintain accurate incident documentation, reports, and case records
• Contribute to the development and continuous improvement of SOC runbooks, playbooks, and operational procedures
• Help shape the future operating model of the Dutch SOC through service reviews, process improvements, and operational excellence initiatives

What we need to see from you

• Junior e xperience in SOC, cybersecurity, system administration, or similar IT security role, with exposure to security monitoring and incident handling
• Hands‑on experience with SIEM platforms and security monitoring tools, ideally including Microsoft Sentinel and Microsoft Defender XDR
• Understanding of security incident response processes and best practices for threat detection, investigation, and escalation
• Knowledge of Microsoft 365 security technologies, with a basic understanding of networking, cloud security, and identity security concepts
• Strong analytical and problem‑solving skills, with the ability to assess security events and make informed decisions in a fast-paced environment
• Excellent communication and customer‑facing skills; experience working with external customers is considered an advantage
• Relevant certifications such as SC‑200, Security+, MS‑900, AZ‑900, or ITIL Foundation are preferred

What we offer

• Work with leading‑edge cybersecurity technologies
• Drive strategic, complex solutions that directly influence customer security posture
• Strong wellbeing and mental‑health support, including access to coaching and mindfulness offers
• Rich learning culture with structured development opportunities and an annual training budget
• Unlimited vacation days
• Multiple mobility options such as public transport solutions, bike leasing, or company car eligibility.
• A vibrant, social workplace with great office facilities and regular team events

Job Function

Services

Accommodations

SoftwareOne welcomes applicants from all backgrounds and abilities to apply. If you require reasonable adjustments at any point during the recruitment process, email us at [e-mail]. Please include the role for which you are applying and your country location. Someone from our organization that is not part of the decision‑making process will be in touch to discuss your specific needs and we will make every effort to accommodate you. Any information shared will be stored securely and treated in the strictest of confidence in line with GDPR.

At SoftwareOne, we are committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants and teammates without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. Additionally, we encourage experienced individuals that have taken an intentional career break and are now prepared to return to work to explore our SOAR program.