SOC Security Engineer - SIEM/EDR Automation

ITProposal; Den Haag; On-site; EUR 55,000 - 85,000; Full time

Job summary

ITProposal is seeking a Security Engineer to support the ongoing operations of a Security Operations Center and drive continuous improvement. You will work with SIEM, EDR, NDR, and SOAR platforms, develop detection capabilities, and automate security processes to respond to incidents.

The role emphasizes collaboration with analysts, architects, and suppliers, along with a proactive approach to security data quality and roadmap contributions. 36 hours per week in The Hague.

Qualifications

• 2+ years of experience managing Windows and Linux environments.
• Experience implementing or managing security solutions in complex IT environments.
• Knowledge of SIEM, EDR, NDR, and/or SOAR technologies.
• Experience with tools such as Microsoft Sentinel, Microsoft Defender, Splunk or similar.
• Scripting and automation experience with Python, PowerShell, Bash, Ansible, or similar.

Responsibilities

• Set up, manage, and optimize SIEM, EDR, NDR, and SOAR platforms.
• Develop and improve detection rules, use cases, dashboards, and automated response actions.
• Integrate and manage security log sources and data connections.
• Monitor the quality, completeness, and availability of security data.
• Support security incident investigations and technical analysis.
• Automate recurring security tasks using scripts, APIs, and playbooks.
• Identify and resolve technical security bottlenecks.
• Contribute to SOC documentation, technical standards, and the security technology roadmap.
• Collaborate with security analysts, architects, administrators, management, and suppliers.

Skills

Windows & Linux admin

SIEM/EDR/NDR/SOAR

Scripting & automation

Security certifications

Security tooling basics

Tools

Microsoft Sentinel

Microsoft Defender

Splunk

Ansible

Job description

ITProposal is seeking a Security Engineer to support the ongoing operations of a Security Operations Center and drive continuous improvement. You will work with SIEM, EDR, NDR, and SOAR platforms, develop detection capabilities, and automate security processes to respond to incidents.

The role emphasizes collaboration with analysts, architects, and suppliers, along with a proactive approach to security data quality and roadmap contributions. 36 hours per week in The Hague.