Security Engineer SRQ199047

ITProposal; Den Haag; On-site; EUR 55,000 - 85,000; Full time

Job summary

ITProposal is seeking a Security Engineer to support the ongoing operations of a Security Operations Center and drive continuous improvement. You will work with SIEM, EDR, NDR, and SOAR platforms, develop detection capabilities, and automate security processes to respond to incidents.

The role emphasizes collaboration with analysts, architects, and suppliers, along with a proactive approach to security data quality and roadmap contributions. 36 hours per week in The Hague.

Qualifications

• 2+ years of experience managing Windows and Linux environments.
• Experience implementing or managing security solutions in complex IT environments.
• Knowledge of SIEM, EDR, NDR, and/or SOAR technologies.
• Experience with tools such as Microsoft Sentinel, Microsoft Defender, Splunk or similar.
• Scripting and automation experience with Python, PowerShell, Bash, Ansible, or similar.

Responsibilities

• Set up, manage, and optimize SIEM, EDR, NDR, and SOAR platforms.
• Develop and improve detection rules, use cases, dashboards, and automated response actions.
• Integrate and manage security log sources and data connections.
• Monitor the quality, completeness, and availability of security data.
• Support security incident investigations and technical analysis.
• Automate recurring security tasks using scripts, APIs, and playbooks.
• Identify and resolve technical security bottlenecks.
• Contribute to SOC documentation, technical standards, and the security technology roadmap.
• Collaborate with security analysts, architects, administrators, management, and suppliers.

Skills

Windows & Linux admin

SIEM/EDR/NDR/SOAR

Scripting & automation

Security certifications

Security tooling basics

Tools

Microsoft Sentinel

Microsoft Defender

Splunk

Ansible

Job description

Security Engineer

Role Overview

We are looking for a Security Engineer to support the technical management and continuous improvement of a Security Operations Center (SOC). You will work with modern security platforms, develop detection capabilities, automate security processes, and support complex security incidents.

Key Responsibilities

• Set up, manage, and optimize SIEM, EDR, NDR, and SOAR platforms.
• Develop and improve detection rules, use cases, dashboards, and automated response actions.
• Integrate and manage security log sources and data connections.
• Monitor the quality, completeness, and availability of security data.
• Support security incident investigations and technical analysis.
• Automate recurring security tasks using scripts, APIs, and playbooks.
• Identify and resolve technical security bottlenecks.
• Contribute to SOC documentation, technical standards, and the security technology roadmap.
• Collaborate with security analysts, architects, administrators, management, and suppliers.

Requirements

• Minimum 2 years of experience managing Windows and Linux environments.
• Experience implementing or managing security solutions in complex IT environments.
• Knowledge of SIEM, EDR, NDR, and/or SOAR technologies.
• Experience with tools such as Microsoft Sentinel, Microsoft Defender, Splunk, or similar.
• Scripting and automation experience with Python, PowerShell, Bash, Ansible, or similar.
• Security certifications such as Security+, Microsoft SC-200, AZ-500, GSEC, or CySA+ are an advantage.
• Strong analytical, technical, problem-solving, and communication skills.
• Proactive, structured, and quality-oriented approach.
• Willingness to continuously develop knowledge of security technologies and emerging threats.

Assignment Details

• Location: The Hague
• Working arrangement: To be confirmed
• Hours: 36 hours/week