Senior Cyber Security Analyst

SoftwareOne; Amsterdam; On-site; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Wellbeing support

Annual training budget

Team events

Mobility options

Office facilities

Job summary

SoftwareOne is building a Dutch-speaking Security Operations Center (SOC) in Amsterdam. The Senior Cyber Security Analyst will lead advanced threat investigations, perform threat hunting, and drive incident response engagements for Dutch customers as part of our MDR service with Microsoft Sentinel.

You will mentor junior analysts, improve processes, and help scale the SOC while collaborating with the global MDR organization and customers in the Netherlands.

Qualifications

• Senior SOC/MDR experience with incidents in enterprise environments.
• Experience leading security investigations and mentoring junior analysts.
• Proficient in Microsoft Sentinel, Defender XDR, and KQL.

Responsibilities

• Lead complex security investigations and incident response engagements for enterprise customers.
• Mentor junior analysts and drive SOC maturity.
• Develop detection rules, alert tuning, and SOAR capabilities.

Skills

Senior SOC/MDR

Threat hunting

Incident response

KQL (Kusto)

Microsoft Sentinel

Microsoft Defender XDR

Mentoring

Customer communication

MITRE ATT&CK

SOAR

Cloud security

Tools

Microsoft Sentinel

Microsoft Defender XDR

KQL

Job description

Why SoftwareOne?

SoftwareOne and Crayon have come together to form a global, AI-powered software and cloud solutions provider with a bold vision for the future. With a footprint in over 70 countries and a diverse team of 13,000+ professionals, we offer unparalleled opportunities for talent to grow, make an impact, and shape the future of technology. At the heart of our business is our people. We empower our teams to work across borders, innovate fearlessly, and continuously develop their skills through world-class learning and development programs. Whether you're passionate about cloud, software, data, AI, or building meaningful client relationships, you’ll find a place to thrive here. Join us and be part of a purpose-driven culture where your ideas matter, your growth is supported, and your career can go global.

The role

• Keen to be among the first senior analysts building SoftwareOne's Dutch-speaking SOC in Amsterdam and shape security operations for Dutch customers?
• Are you passionate about threat hunting, incident response, and helping build a high-performing SOC through mentoring and operational improvement?
• Want to join a global Microsoft security leader that offers exciting growth and career development opportunities?

Practical Information

Location: Amsterdam, Netherlands | Work Arrangement: On-site | Reports to: Regional Service Line Delivery Leader- WEMEA | Visa Requirements: Valid working visa for Netherlands | Language Requirements: fluent/professional Dutch and English, written and verbal

As a Senior Cyber Security Analyst, you will play a key role in establishing and growing SoftwareOne’s Dutch-speaking Security Operations Center (SOC) capability in Amsterdam. You will lead advanced threat investigations, threat hunting activities, and incident response engagements for Dutch customers as part of our Microsoft MDR for Sentinel service. Working closely with customers and the global MDR organization, you will help deliver high-quality security operations while building strong customer relationships. In addition, you will contribute to the development of the SOC by mentoring junior analysts, improving processes, and driving service maturity as the practice expands.

Key Responsibilities

• Lead complex security investigations, root cause analyses, and incident response engagements for enterprise customers
• Perform advanced threat hunting and analyze attacker behaviors using Microsoft Sentinel, Defender XDR, and the MITRE ATT&CK framework
• Develop and optimize detection rules, alert tuning, automation, and SOAR capabilities to strengthen security operations
• Support threat intelligence initiatives and continuously improve monitoring and detection effectiveness
• Act as the senior escalation point for L1 analysts, providing guidance, mentoring, and technical leadership
• Deliver customer-facing incident briefings in Dutch and contribute to Monthly Service Reviews
• Help build and scale the Dutch SOC by shaping workflows, governance, and operational processes while onboarding and mentoring future analysts

What we need to see from you

• Demonstrated experience in a senior SOC, MDR, or cybersecurity operations role, including the investigation of high-severity security incidents
• Proven experience managing customer-facing security incidents and communicating effectively with both technical and non-technical stakeholders
• Strong expertise in Microsoft Sentinel, Microsoft Defender XDR, and Kusto Query Language (KQL).
• Hands-on experience with incident response, forensic investigations, threat hunting, and the use of threat intelligence to identify and mitigate risks
• Knowledge of security automation, SOAR capabilities, cloud security, and identity protection best practices
• Excellent analytical, investigative, and problem-solving skills, with the ability to assess complex threats and respond effectively under pressure
• Ability to mentor junior analysts, drive continuous improvement initiatives, and contribute to the growth, standards, and scalability of a high-performing SOC
• Preferred certifications such as Microsoft SC-200, SC-300, AZ-500, CompTIA CySA+, ITIL Foundation, or CISSP are highly valued

What we offer

• Work with leading edge cybersecurity technologies and enterprise customers
• Drive strategic, complex solutions that directly influence customer security posture
• Strong wellbeing and mental health support, including access to coaching and mindfulness offers
• Rich learning culture with structured development opportunities and an annual training budget
• Competitive time‑off benefits, including additional company leave and support during key life events
• Multiple mobility options such as public transport solutions, bike leasing, or company car eligibility.
• A vibrant, social workplace with great office facilities and regular team events

Job Function

Services

Accommodations

SoftwareOne welcomes applicants from all backgrounds and abilities to apply. If you require reasonable adjustments at any point during the recruitment process, email us at [e-mail]. Please include the role for which you are applying and your country location. Someone from our organization that is not part of the decision‑making process will be in touch to discuss your specific needs and we will make every effort to accommodate you. Any information shared will be stored securely and treated in the strictest of confidence in line with GDPR.

At SoftwareOne, we are committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants and teammates without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. Additionally, we encourage experienced individuals that have taken an intentional career break and are now prepared to return to work to explore our SOAR program.