# Senior Security Engineer at Nccgroup

> Hybrid · Netherlands · Senior · Security · open. Source: https://alderhq.app/jobs/pinpoint%3Anccgroup%3A541681 (read 2026-11-04).

## Facts (observed)

- Company: [Nccgroup](https://alderhq.app/companies/nccgroup)
- Location text: NLD Rijswijk, South Holland
- Where it can be done from (inferred): Hybrid · Netherlands (evidence: "Location: NLD Rijswijk, South Holland")
- Posted: already open when tracking began; date unknown
- First seen by alder: 2026-11-04 · last verified: 2026-11-04
- Reposted: 0 times · edited: 0 times
- Apply on the employer's site: https://nccgroup.pinpointhq.com/en/postings/a31ca1ae-02c9-425d-8f66-6ec0dd670dc8
- Skills listed (inferred): Azure, Terraform

## Pay and sponsorship

- Posted pay: not posted
- Market band for similar posted roles (Netherlands, n 4): p25 €76k, median €77k, p75 €80k

## Description (the employer's text)

Do you enjoy turning complex security data into intelligent, automated defence? At Fox-IT (part of NCC Group), you’ll help leading organisations across the Netherlands strengthen their security posture using Microsoft’s security ecosystem.

You’ll design and deliver Sentinel-led detection and response, build smart SOAR automation, and shape XDR strategies that drive real impact. This is hands-on consultancy work in a collaborative environment that values innovation, knowledge sharing, and high-quality delivery.

### Responsibilities

Microsoft Sentinel engineering:

Design, deploy and optimise Sentinel environments, including data connectors, normalisation, analytics rules, UEBA, watchlists, workbooks, and cost-conscious ingestion strategies

Automation & SOAR:

Develop and implement pragmatic SOAR playbooks using Logic Apps and Power Automate to reduce manual effort and improve response times

XDR implementation:

Deploy and optimise Microsoft Defender XDR across endpoints, identity, email, and cloud. Align detections with MITRE ATT&CK and relevant threat scenarios

Threat hunting & response:

Use KQL for proactive threat hunting, support incident triage, and continuously improve detection use cases in collaboration with SOC teams

Data protection & compliance:

Advise on Microsoft Purview, Information Protection, and DLP, supporting clients from design through to implementation and rollout

Client delivery:

Translate technical solutions into business value through roadmaps, reporting, and stakeholder communication

Knowledge sharing:

Support and mentor colleagues, contribute to reusable assets, and share best practices within Fox-IT

Business development:

Support pre-sales activities, including scoping, proposals, and advising clients on security strategy

### Skills

Strong experience delivering Microsoft Security solutions, including:

- Microsoft Sentinel (essential)
- Microsoft Defender XDR
- SOAR (Logic Apps / Power Automate)
- Purview / DLP
- Solid skills in KQL, scripting (PowerShell), and version control (Git)
- Experience with cost optimisation in Azure (ingestion, retention, table selection)
Proven Consulting Capability:

- Client workshops
- Architecture design
- Stakeholder management
- Clear and structured reporting
- Understanding of security standards and frameworks (ISO 27001, NIST, GDPR) within a cloud context
Language requirement: Professional fluency in Dutch and English (written and spoken)

Nice-to-have Skills:

- Infrastructure as Code (ARM, Bicep, Terraform)
- Entra ID and Conditional Access
- Microsoft Defender for Cloud, Intune
- MITRE ATT&CK mapping
- Incident response experience
- Certifications such as SC-200, SC-100, CISSP, CISM, ISO 27001
Ways of Working:

- Focusing on Clients and Customers.
- Working as One NCC.
- Always Learning.
- Being Inclusive and Respectful.
- Delivering Brilliantly.
### Benefits

- A good salary that matches the things you have already done and will do;
- Flexible working hours and flexibility in working from home or at the office, allowing you to optimally combine your private life with your work;
- A favorable pension scheme, 26 vacation days (+4 mandatory days off), and 8% holiday pay with a full-time contract;
- Plenty of development opportunities: you can gain and share knowledge through training, TechTalks, events, and our own Fox Academy;
- A laptop and business phone. If you use your own phone, you will receive a reimbursement of up to €25 per month;
- A remote work allowance (for hybrid working);
- A performance bonus and profit sharing because we value your effort;
- When we work in the office, we gather every day for a delicious lunch.

---
Data: alder (https://alderhq.app). Cite https://alderhq.app/jobs/pinpoint%3Anccgroup%3A541681 and the date you read it. Observed facts come from the employer's own listing; location reach, level, family and skills are inferences.