Senior Cyber Security Analyst

In this role you will help establish and grow SoftwareOne’s Dutch-speaking Security Operations Center in Amsterdam. You will lead advanced threat investigations, threat hunting, and incident response for Dutch customers as part of the Microsoft MDR for Sentinel service. You’ll mentor junior analysts and drive process improvements to scale the SOC. You will collaborate with customers and the global MDR team to deliver high-quality security operations. This is a chance to shape a fast-growing practice at a global security leader.

• wellbeing and mental-health support
• structured learning and training budget
• competitive time-off and life-event leave
• mobility options (public transport, bike leasing, company car)
• dynamic, collaborative office culture
• access to leading cybersecurity technologies

• Lead complex security investigations and incident response engagements for enterprise customers
• Perform advanced threat hunting using Microsoft Sentinel, Defender XDR, and MITRE ATT&CK
• Develop and optimize detection rules, alert tuning, automation, and SOAR capabilities
• Support threat intelligence initiatives and improve monitoring efficacy
• Serve as senior escalation point for L1 analysts, providing mentorship and guidance
• Deliver customer-facing incident briefings in Dutch and contribute to Monthly Service Reviews
• Help build and scale the Dutch SOC by shaping workflows, governance, and onboarding future analysts

• Senior SOC, MDR, or cybersecurity operations experience with high-severity incidents
• Experience managing customer-facing security incidents and stakeholder communication
• Expertise in Microsoft Sentinel, Defender XDR, and Kusto Query Language (KQL)
• Hands-on incident response, forensic investigations, threat hunting, and use of threat intelligence
• Knowledge of security automation, SOAR, cloud security, and identity protection best practices
• Strong analytical, investigative, and problem-solving skills under pressure
• Ability to mentor junior analysts and drive continuous improvement in SOC standards and scalability
• Preferred certifications such as Microsoft SC-200, SC-300, AZ-500, CompTIA CySA+, ITIL Foundation, or CISSP

• Mentoring and coaching
• Excellent communication with technical and non-technical stakeholders
• Analytical mindset under pressure
• Microsoft Sentinel
• Microsoft Defender XDR
• Kusto Query Language (KQL)