Flexible Senior Cloud Security Engineer – Sentinel & XDR

Fox-IT; Rijswijk; On-site; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Flexible Working

Generous Holiday Allowance

Medicash & Critical Illness Scheme

Pension & Life Assurance

Job summary

Fox-IT, part of NCC Group, is seeking a hands-on security consultant to design and deliver Microsoft Sentinel-based detection and response for Dutch clients. You will build smart SOAR automation, deploy Defender XDR across endpoints, identity, and cloud, and align detections with MITRE ATT&CK in a collaborative consulting environment.

In this role you will hunt for threats with KQL, advise on Purview and DLP, mentor colleagues, contribute to reusable assets, and support pre-sales with security

Responsibilities

• Microsoft Sentinel engineering: Design, deploy and optimise Sentinel environments, including data connectors, normalisation, analytics rules, UEBA, watchlists, workbooks, and cost-conscious ingestion strategies
• Automation & SOAR: Develop and implement pragmatic SOAR playbooks using Logic Apps and Power Automate to reduce manual effort and improve response times
• XDR implementation: Deploy and optimise Microsoft Defender XDR across endpoints, identity, email, and cloud. Align detections with MITRE ATT&CK and relevant threat scenarios
• Threat hunting & response: Use KQL for proactive threat hunting, support incident triage, and continuously improve detection use cases in collaboration with SOC teams
• Data protection & compliance: Advise on Microsoft Purview, Information Protection, and DLP, supporting clients from design through to implementation and rollout
• Client delivery: Translate technical solutions into business value through roadmaps, reporting, and stakeholder communication
• Knowledge sharing: Support and mentor colleagues, contribute to reusable assets, and share best practices within Fox-IT
• Business development: Support pre-sales activities, including scoping, proposals, and advising clients on security strategy

Job description

Fox-IT, part of NCC Group, is seeking a hands-on security consultant to design and deliver Microsoft Sentinel-based detection and response for Dutch clients. You will build smart SOAR automation, deploy Defender XDR across endpoints, identity, and cloud, and align detections with MITRE ATT&CK in a collaborative consulting environment.

In this role you will hunt for threats with KQL, advise on Purview and DLP, mentor colleagues, contribute to reusable assets, and support pre-sales with security