Security Engineer (Blue Team)

Limina Hacking Company B.V.; Rotterdam; Hybrid; EUR 50,000 - 80,000; Full time

Benefits offered by this job

Salary €4,500–€7,200 gross/mo

8% holiday allowance

25 days annual leave

Performance bonus

Mobility budget €750

Training budget

Hybrid work: remote, client sites, and

Engineering culture focused on craft

Access to hacking tools, cyber ranges,

CTFs, meetups & hackathons

Conference reimbursement

Culture of freedom, fun, growth

Job summary

Limina Hacking Company is seeking a Security Engineer (Blue Team) to enhance digital resilience for diverse clients in a hybrid role. You will configure and optimize Microsoft Sentinel, Defender suites, and XDR tools while performing proactive threat hunting and incident response using KQL within Microsoft ecosystems.

The role requires scripting skills (PowerShell/Python), strong analytical thinking, and excellent communication.

Qualifications

• Experience with Microsoft Sentinel, Defender for Endpoint, Defender for Cloud, and Microsoft XDR.
• Demonstrable experience with KQL queries, threat hunting, and alert tuning.
• Knowledge of incident detection and response within Microsoft ecosystems.
• Understanding of the MITRE ATT&CK framework and its practical application in monitoring strategies.
• Experience with scripting, such as PowerShell and/or Python.
• A proactive, curious mindset and strong analytical thinking skills.
• Clear communication skills and a solution-oriented approach.
• The belief that security starts with culture and that technology is the tool.
• Preferably holding a valid driver’s license.

Responsibilities

• Configure, manage, and optimize Microsoft Sentinel, Defender for Endpoint, Defender XDR, and Defender for Cloud.
• Perform threat hunting using KQL queries within Microsoft Sentinel.
• Develop and improve detection, analysis, and response workflows.
• Optimize alerting, use cases, and automated playbooks.
• Contribute to Blue Team strategies and security monitoring roadmaps across various client environments.
• Coach clients and colleagues in interpreting threat data and improving their security posture.
• Collaborate in multidisciplinary teams at the frontline of digital threats.

Skills

Threat hunting

KQL queries

Incident response

PowerShell scripting

Python scripting

Analytical thinking

Communication skills

Proactive mindset

Driver's license

Tools

Microsoft Sentinel

Defender for Endpoint

Defender for Cloud

Microsoft XDR

MITRE ATT&CK

Job description

At Limina Hacking Company, we are driven by a mission that goes beyond technology. We are building a world where security is not just a department, but a mindset.

We help organizations become not only more secure, but also smarter, more aware, and more resilient — from the boardroom to DevOps teams.

Our culture is built on knowledge sharing, creativity, transparency, and enjoyment. We challenge each other, experiment, keep learning, and dare to think and act differently.

Limina Hacking Company is not your typical consultancy.

We are a movement.

As a Security Engineer (Blue Team), you strengthen the digital resilience of organizations on a daily basis. You specialize in detecting, analyzing, and preventing cyber threats within complex Microsoft environments.

You work with modern security tooling, think in terms of attack scenarios as well as defensive strategies, and help clients and colleagues structurally improve how they handle threats. You do this in multidisciplinary teams, close to both the technology and real-world practice.

What we offer

• Salary between €4.500,- and €7.200, - gross per month, depending on knowledge and experience;
• 8% holiday allowance and 25 days of annual leave;
• Performance bonus based on contribution and results;
• Mobility budget of €750,-;
• Generous training budget for certifications and personal development;
• Hybrid working: remote, at client locations, and in the office;
• A true engineering culture focused on craftsmanship and knowledge sharing;
• Access to professional hacking tools, cyber ranges, and internal lab environments;
• Participation in CTFs, meetups, hackathons, and innovation days;
• (Partial) reimbursement for international security conferences and events;
• A culture where freedom, fun, and growth are part of everyday work.

Key Responsibilities

• Configure, manage, and optimize Microsoft Sentinel, Defender for Endpoint, Defender XDR, and Defender for Cloud;
• Perform threat hunting using KQL queries within Microsoft Sentinel;
• Develop and improve detection, analysis, and response workflows;
• Optimize alerting, use cases, and automated playbooks;
• Contribute to Blue Team strategies and security monitoring roadmaps across various client environments;
• Coach clients and colleagues in interpreting threat data and improving their security posture;
• Collaborate in multidisciplinary teams at the frontline of digital threats.

Your Strengths (required/Preferred)

• Experience with Microsoft Sentinel, Defender for Endpoint, Defender for Cloud, and Microsoft XDR;
• Demonstrable experience with KQL queries, threat hunting, and alert tuning;
• Knowledge of incident detection and response within Microsoft ecosystems;
• Understanding of the MITRE ATT&CK framework and its practical application in monitoring strategies;
• Experience with scripting, such as PowerShell and/or Python;
• A proactive, curious mindset and strong analytical thinking skills;
• Clear communication skills and a solution-oriented approach;
• The belief that security starts with culture and that technology is the tool;
• Preferably holding a valid driver’s license.

Certifications

• Microsoft Certified: Security Operations Analyst Associate (SC-200);
• Microsoft Certified: Azure Security Engineer Associate (AZ-500);
• Microsoft Certified: Cybersecurity Architect Expert (SC-100) - preferred;
• GIAC Certified Detection Analyst (GCDA) or equivalent - preferred.

Ready to make an impact?

At Limina Hacking Company, we believe in enthusiasts who have become professionals.

Here, work doesn't feel like work. You live your passion, continuously develop yourself, and create meaningful impact with your technical skills.

You don't just build cloud and security solutions, you contribute to a new way of working, thinking, and securing. A way where knowledge is shared openly, where people dare to grow, and where real impact is made.

Ready to join the movement?