Senior Cyber Security Analyst

SoftwareOne; Amsterdam; On-site; EUR 80,000 - 110,000; Full time

Benefits offered by this job

Work with leading-edge cybersecurityเท

Strategic, complex solutions

Wellbeing and mental-health support

Structured development opportunities &

Annual training budget

Competitive time-off benefits

Mobility options

Vibrant office culture

Job summary

SoftwareOne is establishing its Dutch-speaking Security Operations Center in Amsterdam. As a Senior Cyber Security Analyst, you will lead advanced threat investigations, threat hunting, and incident response engagements for Dutch customers as part of the Microsoft MDR for Sentinel service.

Working with customers and the global MDR organization, you will deliver high-quality security operations and build strong relationships.

Qualifications

• Demonstrated experience in a senior SOC, MDR, or cybersecurity operations role.
• Proven experience managing customer-facing security incidents and communicating effectively with technical and non-technical stakeholders.
• Strong expertise in Microsoft Sentinel, Defender XDR, and KQL.
• Hands-on incident response, forensic investigations, threat hunting, and using threat intelligence to mitigate risks.
• Knowledge of security automation, SOAR, cloud security, and identity protection best practices.
• Excellent analytical, investigative, and problem-solving skills under pressure.
• Ability to mentor junior analysts and contribute to SOC growth, standards, and scalability.
• Preferred certifications such as SC-200, SC-300, AZ-500, CompTIA CySA+, ITIL Foundation, or CISSP.

Responsibilities

• Lead complex security investigations, root cause analysis, and incident response engagements for enterprise customers.
• Perform advanced threat hunting and analyze attacker behaviors using Microsoft Sentinel, Defender XDR, and the MITRE ATT&CK framework.
• Develop and optimize detection rules, alert tuning, automation, and SOAR capabilities to strengthen security operations.
• Support threat intelligence initiatives and continuously improve monitoring and detection effectiveness.
• Act as the senior escalation point for L1 analysts, providing guidance, mentoring, and technical leadership.
• Deliver customer-facing incident briefings in Dutch and contribute to Monthly Service Reviews.
• Help build and scale the Dutch SOC by shaping workflows, governance, and operational processes while onboarding and mentoring future analysts.

Skills

Threat hunting

Incident response

Senior SOC experience

Mentoring

Customer-facing communication

Security operations

Education

Microsoft certifications (SC-200, SC-300, AZ-500)

CompTIA CySA+

ITIL Foundation

CISSP

Tools

Microsoft Sentinel

Microsoft Defender XDR

Kusto Query Language (KQL)

SOAR platforms

Job description

• Keen to be among the first senior analysts building SoftwareOne's Dutch-speaking SOC in Amsterdam and shape security operations for Dutch customers?
• Are you passionate about threat hunting, incident response, and helping build a high-performing SOC through mentoring and operational improvement?
• Want to join a global Microsoft security leader that offers exciting growth and career development opportunities?

Practical Information

Location: Amsterdam, Netherlands | Work Arrangement: On-site | Reports to: Regional Service Line Delivery Leader- WEMEA | Visa Requirements: Valid working visa for Netherlands | Language Requirements: fluent/professional Dutch and English, written and verbal

As a Senior Cyber S ecurity A nalyst , you will play a key role in establishing and growing SoftwareOne’s Dutch-speaking Security Operations Center (SOC) capability in Amsterdam. You will lead advanced threat investigations, threat hunting activities, and incident response engagements for Dutch customers as part of our Microsoft MDR for Sentinel service. Working closely with customers and the global MDR organization, you will help deliver high-quality security operations while building strong customer relationships. In addition, you will contribute to the development of the SOC by mentoring junior analysts, improving processes, and driving service maturity as the practice expands.

Key R esponsibilities

• Lead complex security investigations, root cause analyses, and incident response engagements for enterprise customers
• Perform advanced threat hunting and analyze attacker behaviors using Microsoft Sentinel, Defender XDR, and the MITRE ATT&CK framework
• Develop and optimize detection rules, alert tuning, automation, and SOAR capabilities to strengthen security operations
• Support threat intelligence initiatives and continuously improve monitoring and detection effectiveness
• Act as the senior escalation point for L1 analysts, providing guidance, mentoring, and technical leadership
• Deliver customer-facing incident briefings in Dutch and contribute to Monthly Service Reviews
• Help build and scale the Dutch SOC by shaping workflows, governance, and operational processes while onboarding and mentoring future analysts

• Lead complex security investigations, root cause analyses, and incident response engagements for enterprise customers
• Perform advanced threat hunting and analyze attacker behaviors using Microsoft Sentinel, Defender XDR, and the MITRE ATT&CK framework
• Develop and optimize detection rules, alert tuning, automation, and SOAR capabilities to strengthen security operations
• Support threat intelligence initiatives and continuously improve monitoring and detection effectiveness
• Act as the senior escalation point for L1 analysts, providing guidance, mentoring, and technical leadership
• Deliver customer-facing incident briefings in Dutch and contribute to Monthly Service Reviews
• Help build and scale the Dutch SOC by shaping workflows, governance, and operational processes while onboarding and mentoring future analysts

Job Requirements

• Demonstrated experience in a senior SOC, MDR, or cybersecurity operations role, including the investigation of high-severity security incidents
• Proven experience managing customer-facing security incidents and communicating effectively with both technical and non-technical stakeholders
• Strong expertise in Microsoft Sentinel, Microsoft Defender XDR, and Kusto Query Language (KQL).
• Hands‑on experience with incident response, forensic investigations, threat hunting, and the use of threat intelligence to identify and mitigate risks
• Knowledge of security automation, SOAR capabilities, cloud security, and identity protection best practices
• Excellent analytical, investigative, and problem‑solving skills, with the ability to assess complex threats and respond effectively under pressure
• Ability to mentor junior analysts, drive continuous improvement initiatives, and contribute to the growth, standards, and scalability of a high‑performing SOC
• Preferred certifications such as Microsoft SC‑200, SC‑300, AZ-500, CompTIA CySA +, ITIL Foundation, or CISSP are highly valued

What we offer

• Work with leading ‑ edge cybersecurity technologies and enterprise customers
• Drive strategic, complex solutions that directly influence customer security posture
• Strong wellbeing and mental ‑ health support, including access to coaching and mindfulness offers
• Rich learning culture with structured development opportunities and an annual training budget
• Competitive time ‑ off benefits, including additional company leave and support during key life events
• Multiple mobility options such as public transport solutions, bike leasing, or company car eligibility.
• A vibrant, social workplace with great office facilities and regular team events

Company description

SoftwareOne is a global provider of software and cloud solutions. With a presence in over 70 countries and more than 12,000 professionals, we help organizations optimize software investments, modernize applications, and unlock the value of cloud, data, and AI.

Our people are at the core of everything we do. We enable collaboration across borders, continuous learning, and opportunities to grow in a fast-evolving technology landscape. Whether your focus is on technology, customer success, or business operations, your ideas matter, and your contributions make a difference.

Join a global team where you can build your skills, work with leading technologies, and make a real impact for our customers.

• Keen to be among the first senior analysts building SoftwareOne's Dutch-speaking SOC in Amsterdam and shape security operations for Dutch customers?
• Are you passionate about threat hunting, incident response, and helping build a high-performing SOC through mentoring and operational improvement?
• Want to join a global Microsoft security leader that offers exciting growth and career development opportunities?

Practical Information

Location: Amsterdam, Netherlands | Work Arrangement: On-site | Reports to: Regional Service Line Delivery Leader- WEMEA | Visa Requirements: Valid working visa for Netherlands | Language Requirements: fluent/professional Dutch and English, written and verbal

As a Senior Cyber S ecurity A nalyst , you will play a key role in establishing and growing SoftwareOne’s Dutch-speaking Security Operations Center (SOC) capability in Amsterdam. You will lead advanced threat investigations, threat hunting activities, and incident response engagements for Dutch customers as part of our Microsoft MDR for Sentinel service. Working closely with customers and the global MDR organization, you will help deliver high-quality security operations while building strong customer relationships. In addition, you will contribute to the development of the SOC by mentoring junior analysts, improving processes, and driving service maturity as the practice expands.

Key R esponsibilities

• Lead complex security investigations, root cause analyses, and incident response engagements for enterprise customers
• Perform advanced threat hunting and analyze attacker behaviors using Microsoft Sentinel, Defender XDR, and the MITRE ATT&CK framework
• Develop and optimize detection rules, alert tuning, automation, and SOAR capabilities to strengthen security operations
• Support threat intelligence initiatives and continuously improve monitoring and detection effectiveness
• Act as the senior escalation point for L1 analysts, providing guidance, mentoring, and technical leadership
• Deliver customer-facing incident briefings in Dutch and contribute to Monthly Service Reviews
• Help build and scale the Dutch SOC by shaping workflows, governance, and operational processes while onboarding and mentoring future analysts

• Lead complex security investigations, root cause analyses, and incident response engagements for enterprise customers
• Perform advanced threat hunting and analyze attacker behaviors using Microsoft Sentinel, Defender XDR, and the MITRE ATT&CK framework
• Develop and optimize detection rules, alert tuning, automation, and SOAR capabilities to strengthen security operations
• Support threat intelligence initiatives and continuously improve monitoring and detection effectiveness
• Act as the senior escalation point for L1 analysts, providing guidance, mentoring, and technical leadership
• Deliver customer-facing incident briefings in Dutch and contribute to Monthly Service Reviews
• Help build and scale the Dutch SOC by shaping workflows, governance, and operational processes while onboarding and mentoring future analysts