Senior Security Engineer

Doghouse Recruitment; Amsterdam; Hybrid; EUR 108,000 - 132,000; Full time

Benefits offered by this job

Hybrid work

Electric lease car

Public transport card

Cash equivalent

Learning budget

25 holidays

Job summary

Doghouse Recruitment is seeking a security-focused IT infrastructure expert with a strong Azure background to own security across customer environments. The role covers Windows Server hardening, Azure workload security, Entra ID governance, and end-to-end vulnerability management, collaborating with SIEM/SOC/EDR/MDR tools and communicating risk clearly to clients.

The candidate will act as a technical lead, not a manager, and will work in a hybrid setup with a focus on delivering secure,

Qualifications

• 6+ years in IT infrastructure and Azure with security focus in recent years
• Windows background: Windows Server, Active Directory, Group Policy, hardening and patching
• Solid hands-on Azure experience, including networking and infrastructure as code with Terraform
• Entra ID: RBAC, Conditional Access, Privileged Identity Management
• Vulnerability management in practice: scanning, prioritising and getting fixes through
• Experience with SIEM, SOC, EDR or MDR services (e.g., Sentinel, Defender for Endpoint)
• Fluent English; Dutch is a plus

Responsibilities

• Own security within the team and perform work hands-on
• Hardening, patching and configuration of Windows servers and Azure workloads
• Manage identity with Entra ID, RBAC, CA and PIM
• Lead end-to-end vulnerability management from scan to remediation
• Coordinate with SIEM, SOC, EDR or MDR services to ensure meaningful detection
• Explain risk to customers in plain language, acting as technical lead rather than manager

Skills

Azure security

Windows Server

Active Directory

Terraform

Entra ID

Vulnerability management

SIEM/SOC/EDR/MDR

English (fluent)

Tools

Terraform

Microsoft Sentinel

Defender for Endpoint

Job description

[Business Critical IT / Managed Services]

You started on Windows servers, moved into Azure, and became the person everyone asks about security. My client needs two of those.

My client runs business critical infrastructure for large organisations, a good part of it in regulated sectors. Every customer environment belongs to one dedicated team that designs it, builds it and then runs it for years. There is no management layer above the team. One engineer carries the tech lead role, and where security matters most, one carries the security lead role. Next to the customer teams, my client runs its own security operations centre and managed detection and response service.

What you’ll do

You are the person in the team who owns security, and you do the work yourself. It starts with the foundations: you know Windows servers and Azure workloads inside out, so hardening, patching and configuration are not abstract to you. On top of that sits identity in Entra ID, with role based access control, Conditional Access and Privileged Identity Management. You run vulnerability management end to end, from the scan to the fix actually landing, and you decide what gets fixed first. You work with SIEM, SOC, EDR and MDR services, think Microsoft Sentinel, Defender for Endpoint and Defender for Cloud, and you make sure what gets detected is worth detecting. When the customer asks what the risk is, you are the one in the room, and you explain it in plain words. Lead here means technical lead, not manager: no headcount and no performance reviews, because that layer does not exist.

Your profile

• 6+ years in IT infrastructure and Azure, with security as your main focus in recent years
• A Windows background: Windows Server, Active Directory, Group Policy, hardening and patching
• Solid hands on Azure experience, including networking and infrastructure as code with Terraform
• Entra ID: role based access control, Conditional Access, Privileged Identity Management
• Vulnerability management in practice: scanning, prioritising and getting the fixes through
• Experience with SIEM, SOC, EDR or MDR services, for example Sentinel and Defender for Endpoint
• Fluent English, Dutch is a plus

What’s in it for you

Up to €120K gross per year including holiday pay. A permanent contract from day one, 32 to 40 hours. Hybrid, with three days a week in the office in Amsterdam or at the customer. You pick your own mobility: an electric lease car, a first class public transport card, or the cash equivalent. 25 holidays, and a learning budget with no hard ceiling: you agree the time with your team and the money with your coach.