Technical Account Manager

Fox-IT; Rijswijk; Hybrid; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid work

Pension scheme

Vacation days

Laptop & mobile

Internet allowance

Professional development

Training & events

Culture & colleagues

Job summary

NCC Group is seeking a TAM to manage the technical customer relationship and drive a defensible 12-month roadmap. You will translate security metrics into narratives, engage C-suite stakeholders, and balance reactive support with proactive improvements.

You will own deliverables such as playbooks, dashboards, and analytics, while collaborating across SOC and threat teams to close gaps and strengthen posture.

Qualifications

• Proven experience in cybersecurity, IT operations, or managed security services.
• Background in a customer-facing technical role (e.g. TAM, Security Consultant).
• Experience engaging senior stakeholders (CISO, Head of IT/Security).
• Strong understanding of SOC operations, threat detection, and incident response.
• Ability to understand end-to-end customer environments (cloud, infrastructure, security stack).
• Experience with security tools (SIEM, EDR, SOAR, DLP, vulnerability management).
• Able to interpret and translate security metrics into clear risk-based narratives.

Responsibilities

• Own the technical relationship and act as trusted advisor with customers.
• Interpret TAM Score narrative and anchor 12-month roadmaps with quarterly focus.
• Build the 12-month technical roadmap aligned to TAM Score and gaps.
• Deliver TAM/technical portions of QBRs and present progress to senior stakeholders.
• Provide reactive support via tickets and enable remediation guidance.
• Drive proactive improvements, tuning, and automation to improve posture.
• Deliver technical artefacts (playbooks, dashboards, analytics, reports).
• Identify defensive gaps (pentest, IR, EASM, DLP, tabletop) and align NCC services.

Skills

Cybersecurity experience

Customer-facing role

Stakeholder engagement

SOC operations

End-to-end environments

Security tools

Metrics storytelling

Roadmap planning

QBR delivery

Trusted advisor

Reactive + proactive support

Continuous improvement

Technical deliverables

Defensive security domains

Security gap analysis

Communication skills

ITIL / service management

Certifications desirable

Tools

SIEM

EDR

SOAR

DLP

Vulnerability management

Job description

Department: Cyber Services and Capabilities

Department: Cyber Services and Capabilities

Location: NLD Rijswijk

Description

The TAM is the customer's technical owner for the service and the expert voice in the relationship. They quantify the customer's security maturity through the TAM Score framework, build and steer a defensible 12-month technical roadmap, and provide the depth of Microsoft Azure Sentinel/Defender XDR expertise needed to advise credibly on priorities. TAMs translate data into narrative - interpreting scores, surfacing the highest-leverage gaps, and guiding customers toward measurable improvement quarter by quarter. They act as a technical buffer between customers and internal operational teams by resolving technical queries, advising on improvements, and ensuring issues are properly packaged when escalation is required.

Key Responsibilities

• Own the technical relationship: understand the customer environment end-to-end, maintain technical context, and operate as the trusted advisor in the partnership.
• Own the TAM Score narrative: interpret Environment, SOC, and Health scores into a credible story about where the customer stands and where to focus next - accountable for the quality of the diagnosis and recommendations, not the absolute score.
• Build and maintain the 12-month technical roadmap: anchored to the TAM Score, with defined quarterly focus areas tied to the highest-leverage gaps.
• Deliver the TAM/technical portion of Quarterly Business Reviews: present the score, narrate progress, and align with customer stakeholders up to CISO/senior IT leadership.
• Deliver reactive technical support via tickets (troubleshooting, investigation support, remediation guidance).
• Deliver proactive technical expertise and drive continuous improvement (Tier A included): posture and coverage advisory, tuning/noise reduction, cost/retention optimisation, automation uplift.
• Own technical deliverables: automation/playbooks where in scope, custom analytics and workbooks.
• Drive the operational health-check catalogue as scheduled workstreams within the roadmap.
• Advise on Defensive Breadth gaps (pentest cadence, IR retainer, EASM, DLP, tabletops, etc) - surfacing risk credibly and identifying where NCC services can close the gap.
• Maintain and refresh the threat overview as the customer's environment and threat landscape evolve.

Skills, Knowledge & Expertise

• Proven experience in cybersecurity, IT operations, or managed security services
• Background in a customer-facing technical role (e.g. TAM, Security Consultant)
• Experience engaging senior stakeholders (CISO, Head of IT/Security)
• Strong understanding of SOC operations, threat detection, and incident response
• Ability to understand end-to-end customer environments (cloud, infrastructure, security stack)
• Experience with security tools (e.g. SIEM, EDR, SOAR, DLP, vulnerability management)
• Able to interpret and translate security metrics into clear risk-based narratives
• Proven ability to build and maintain 12-month technical roadmaps with quarterly focus
• Strong skills in data analysis, prioritisation, and identifying high-impact improvements
• Experience delivering Quarterly Business Reviews (QBRs) to senior audiences
• Ability to act as a trusted advisor, owning the technical customer relationship
• Experience balancing reactive support (tickets, troubleshooting) and proactive improvement
• Capability to deliver continuous improvement initiatives (tuning, optimisation, automation)
• Experience creating technical deliverables (playbooks, dashboards, analytics, reports)
• Knowledge of defensive security domains (pentest, IR, EASM, DLP, tabletop exercises)
• Ability to identify security gaps and align solutions/services to mitigate risk
• Strong communication and storytelling skills, adapting for technical and non-technical audiences
• Familiarity with service management practices (e.g. ITIL, ticketing systems)
• Relevant certifications (e.g. CISSP, CISM, Security+, cloud security) – desirable
• Proactive, accountable, and customer-focused mindset with strong ownership

Job Benefits

• Flexible working hours and hybrid working arrangements.
• Competitive pension scheme.
• 24 vacation days, 4 additional leave days for business closure, and 8% holiday allowance.
• A company laptop and mobile phone.
• An internet allowance of up to €40 per month.
• Extensive development opportunities through our Academy.
• Access to training courses, certifications, TechTalks, and industry events.
• An informal, professional, and inspiring work environment with engaged colleagues.

To ensure a fair and consistent assessment process, candidates must not use AI tools to generate, suggest, coach or provide responses during live or recorded interviews unless this has been approved in advance, by the hiring team. For more information please read our AI in Hiring - Candidate Policy.

If you do not want us to retain your details, you can utilise the Manage Your Data tool provided by Pinpoint or contact us directly at: [e-mail]. All personal data is held in accordance with the NCC Group Privacy Notice.

We are committed to diversity and flexibility in the workplace. If you require any reasonable adjustments to support you during the application process, please tell us at any stage.

Please note that this role involves mandatory pre-employment background checks due to the nature of the work NCC Group does. To apply, you must be willing and able to undergo the vetting process.