Senior MXDR Engineer

NCC Group; Rijswijk; On-site; EUR 90,000 - 120,000; Part time

Benefits offered by this job

Hybrid working arrangements

Competitive pension scheme

Laptop & mobile phone provided

Internet allowance

Job summary

NCC Group is seeking a Senior MXDR Engineer to deploy and maintain MXDR solutions in a client-facing role from Rijswijk. You will assess customer needs, collaborate with stakeholders, and ensure environments become safer and more resilient against threats.

The role emphasizes technical consultancy, strong communication, and continuous learning, with familiarity in SIEM & EDR tools like Splunk, CrowdStrike, or SentinelOne.

Qualifications

• Experience with MXDR platforms and SIEM/EDR tools.
• Strong client-facing communication and storytelling.
• Ability to work in multidisciplinary teams.
• Fluent English communication.

Responsibilities

• Implement and support MXDR solutions for customers, ensuring effective deployment and configuration.
• Independently operate in multidisciplinary teams for projects, proactively contributing to client deliverables and addressing internal and external technical and organizational challenges.
• Serve as a Subject Matter Expert on MXDR tools, supporting and advising customers and colleagues across teams.
• Continuously improve MXDR services through automation, process enhancements and knowledge sharing.

Skills

MXDR technologies

Cybersecurity

Client engagement

Leadership

Education

CISM Certification

Splunk Certified Admin

Tools

Splunk

CrowdStrike

Microsoft Sentinel

SentinelOne

Job description

Senior MXDR Engineer

Department: Cyber Services and Capabilities

Employment Type: Fixed Term Contract

Location: NLD Rijswijk

Description

As a Senior MXDR Engineer, you are a true multitasker with both technical depth and strong communication skills. Deploying and maintaining MXDR solutions is your core responsibility - your "bread and butter." You assess customer needs, collaborate with stakeholders across organizational levels, and ensure their environments become safer and more resilient against threats.

Your expertise is also a trusted resource within the team. Whether it's helping the SOC interpret the logging associated with a Splunk alert, troubleshooting CPU spikes of CrowdStrike agents during a DFIR engagement, or assisting SDM in interpreting technical questions - you’re the go-to person.

This role requires a broad skill set. A major focus is on technical consultancy, meaning a strong technical foundation, professional communication skills, and a passion for continuous learning are essential. We’re looking for someone with experience with SIEM & EDR tools. We see MXDR as Microsoft Sentinel, Splunk, CrowdStrike or Sentinel One. Familiarity with these platforms is a strong plus.

Because this is a customer-facing role, you should feel confident engaging with clients in both in-person and digital environments. As part of a global organization, proficiency in written and spoken English is a must.

Key Responsibilities

• Implement and support MXDR solutions for customers, ensuring effective deployment and configuration.
• Independently operate in multidisciplinary teams for projects, proactively contributing to client deliverables and addressing internal and external technical and organizational challenges.
• Serve as a Subject Matter Expert on specific MXDR tools, supporting and advising customers and colleagues across teams.
• Continuously improve the MXDR services through automation, process enhancements and knowledge sharing.

Skills, Knowledge and Expertise

Functional and technical skills:

• Expert knowledge of cybersecurity and proficiency in one or multiple MXDR technologies.
• Demonstrated ability to analyze and interpret complex data.
• Strong leadership and communication skills.
• Exceptional client engagement and problem-solving skills.

Certifications:

• Holder of at least one industry-recognized certification for example CISM, Splunk Certified Admin, relevant MS certificates, CompTIA.

Benefits

• Flexible working hours and hybrid working arrangements.
• Competitive pension scheme.
• 24 vacation days, 4 additional leave days for business closure, and 8% holiday allowance.
• A company laptop and mobile phone.
• An internet allowance of up to €40 per month.
• Extensive development opportunities through our Academy.
• Access to training courses, certifications, TechTalks, and industry events.
• An informal, professional, and inspiring work environment with engaged colleagues.