Senior Cyber Security Analyst

SoftwareONE Deutschland GmbH; Amsterdam; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Office facilities

Annual training budget

Mobility options

Wellbeing support

Team events

Office facilities

Job summary

SoftwareOne in Amsterdam is seeking a Senior Cyber Security Analyst to establish and grow the Dutch-speaking Security Operations Center for Dutch customers. You will lead advanced threat investigations, threat hunting, and incident response engagements as part of the Microsoft MDR for Sentinel service.

You will mentor junior analysts, improve processes, and help scale the SOC by shaping workflows and governance, while working closely with customers and the global MDR team to deliver high-quality

Qualifications

• Demonstrated experience in a senior SOC/MDR or cybersecurity operations role, including high-severity incidents.
• Proven ability to manage customer-facing security incidents and communicate with technical and non-technical stakeholders.
• Strong expertise with Microsoft Sentinel, Defender XDR and Kusto Query Language (KQL).
• Hands-on incident response, forensic investigations, threat hunting, and using threat intel to mitigate risk.
• Knowledge of automation, SOAR, cloud security, and identity protection best practices.
• Excellent analytical and problem-solving skills under pressure, with mentoring capability.

Responsibilities

• Lead complex security investigations and incident response engagements for enterprise customers.
• Perform advanced threat hunting and analyze attacker behavior using Microsoft tools and MITRE ATT&CK.
• Develop detection rules, alert tuning, automation, and SOAR capabilities to strengthen SOC.
• Support threat intelligence initiatives and continuously improve monitoring and detection.
• Act as senior escalation point for L1 analysts, providing guidance and technical leadership.
• Deliver customer-facing incident briefings in Dutch and contribute to service reviews.
• Help build and scale the Dutch SOC by shaping workflows, governance, and onboarding future analysts.

Skills

Senior SOC

MDR

Cybersecurity

Microsoft Sentinel

Microsoft Defender XDR

KQL

Incident response

Threat hunting

Forensic investigations

Threat intelligence

SOAR

Cloud security

Identity protection

Mentoring

Stakeholder communications

Job description

Why SoftwareOne?

SoftwareOne and Crayon have come together to form a global, AI-powered software and cloud solutions provider with a bold vision for the future. With a footprint in over 70 countries and a diverse team of 13,000+ professionals, we offer unparalleled opportunities for talent to grow, make an impact, and shape the future of technology. At the heart of our business is our people. We empower our teams to work across borders, innovate fearlessly, and continuously develop their skills through world-class learning and development programs. Whether you're passionate about cloud, software, data, AI, or building meaningful client relationships, you’ll find a place to thrive here. Join us and be part of a purpose-driven culture where your ideas matter, your growth is supported, and your career can go global.

The role

• Keen to be among the first senior analysts building SoftwareOne's Dutch-speaking SOC in Amsterdam and shape security operations for Dutch customers?
• Are you passionate about threat hunting, incident response, and helping build a high-performing SOC through mentoring and operational improvement?
• Want to join a global Microsoft security leader that offers exciting growth and career development opportunities?

Practical Information

Location: Amsterdam, Netherlands | Work Arrangement: On-site | Reports to: Regional Service Line Delivery Leader- WEMEA | Visa Requirements: Valid working visa for Netherlands | Language Requirements: fluent/professional Dutch and English, written and verbal

As a Senior Cyber Security Analyst, you will play a key role in establishing and growing SoftwareOne’s Dutch-speaking Security Operations Center (SOC) capability in Amsterdam. You will lead advanced threat investigations, threat hunting activities, and incident response engagements for Dutch customers as part of our Microsoft MDR for Sentinel service. Working closely with customers and the global MDR organization, you will help deliver high-quality security operations while building strong customer relationships. In addition, you will contribute to the development of the SOC by mentoring junior analysts, improving processes, and driving service maturity as the practice expands.

Key Responsibilities

• Lead complex security investigations, root cause analyses, and incident response engagements for enterprise customers
• Perform advanced threat hunting and analyze attacker behaviors using Microsoft Sentinel, Defender XDR, and the MITRE ATT&CK framework
• Develop and optimize detection rules, alert tuning, automation, and SOAR capabilities to strengthen security operations
• Support threat intelligence initiatives and continuously improve monitoring and detection effectiveness
• Act as the senior escalation point for L1 analysts, providing guidance, mentoring, and technical leadership
• Deliver customer-facing incident briefings in Dutch and contribute to Monthly Service Reviews
• Help build and scale the Dutch SOC by shaping workflows, governance, and operational processes while onboarding and mentoring future analysts

What we need to see from you

• Demonstrated experience in a senior SOC, MDR, or cybersecurity operations role, including the investigation of high-severity security incidents
• Proven experience managing customer-facing security incidents and communicating effectively with both technical and non-technical stakeholders
• Strong expertise in Microsoft Sentinel, Microsoft Defender XDR, and Kusto Query Language (KQL).
• Hands-on experience with incident response, forensic investigations, threat hunting, and the use of threat intelligence to identify and mitigate risks
• Knowledge of security automation, SOAR capabilities, cloud security, and identity protection best practices
• Excellent analytical, investigative, and problem-solving skills, with the ability to assess complex threats and respond effectively under pressure
• Ability to mentor junior analysts, drive continuous improvement initiatives, and contribute to the growth, standards, and scalability of a high-performing SOC
• Preferred certifications such as Microsoft SC-200, SC-300, AZ-500, CompTIA CySA+, ITIL Foundation, or CISSP are highly valued

What we offer

• Work with leading-edge cybersecurity technologies and enterprise customers
• Drive strategic, complex solutions that directly influence customer security posture
• Strong wellbeing and mental health support, including access to coaching and mindfulness offers
• Rich learning culture with structured development opportunities and an annual training budget
• Competitive time-off benefits, including additional company leave and support during key life events
• Multiple mobility options such as public transport solutions, bike leasing, or company car eligibility.
• A vibrant, social workplace with great office facilities and regular team events

Job Function

Services

Accommodations

SoftwareOne welcomes applicants from all backgrounds and abilities to apply. If you require reasonable adjustments at any point during the recruitment process, email us at [e-mail]. Please include the role for which you are applying and your country location. Someone from our organization that is not part of the decision-making process will be in touch to discuss your specific needs and we will make every effort to accommodate you. Any information shared will be stored securely and treated in the strictest of confidence in line with GDPR. At SoftwareOne, we are committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants and teammates without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. Additionally, we encourage experienced individuals that have taken an intentional career break and are now prepared to return to work to explore our SOAR program.