At spotit, our SOC is built on expertise, collaboration, and continuous improvement. As a SOC Security Engineer, you will play a key role in maintaining, improving, and standardizing the security environments of our SOC customers.
You work closely with our analysts and customers to ensure their environments are optimized for effective detection and response. From onboarding new clients to improving existing setups, you help design efficient architectures and ensure the right security data is collected, processed, and analyzed.
Your mission: make our SOC environments smarter, more efficient, and ready to detect what truly matters.
What will you do?
Maintain, improve, and standardize security environments across our SOC customers
Support and guide new customer onboarding into our SOC services
Work extensively with the Microsoft security ecosystem (Sentinel, Defender XDR, Entra ID)
Help determine which security data should be collected, filtered, and retained to optimize detection and cost efficiency
Collaborate with customers to ensure their security architecture aligns with SOC best practices
Improve data pipelines and data quality to strengthen detection capabilities
Research and evaluate new technologies and architectures for more efficient security data management
Contribute to vulnerability management processes and tooling
Support analysts by improving the quality and reliability of the SOC platform
A day in the life of a SOC Security Engineer
Your morning starts with a customer onboarding session. Together with the client’s IT team, you review how their Microsoft environment integrates with the SOC platform and ensure the right logs and signals are flowing into Microsoft Sentinel.
Later in the day, you analyze data ingestion patterns and discover opportunities to filter unnecessary log streams. By fine-tuning data collection, you help reduce noise while preserving valuable security insights.
In the afternoon, you collaborate with SOC analysts to improve detection rules and discuss how threat intelligence could be operationalized more effectively. You end your day documenting improvements that will help standardize configurations across multiple customer environments.
Your profile
Must haves
Strong knowledge of the Microsoft security ecosystem (Sentinel, Defender XDR, Entra ID)
Experience working in a SOC environment, preferably within an MSSP
Interest in data engineering concepts and security data pipelines
Experience with vulnerability management platforms
Comfortable communicating with customers and technical stakeholders
Fluent in Dutch and English
Nice to have
Experience with the Elastic Stack
Experience with CSIRT interventions
Experience operationalizing threat intelligence
Knowledge of Terraform
You are analytical, curious, and always looking for ways to improve. You enjoy collaborating with both technical teams and customers, and you thrive in an environment where innovation and learning are encouraged.
“What I like most about working in the SOC at spotit is that we’re constantly improving how security works for our customers. We’re not just reacting to incidents. We’re building smarter environments that help detect threats earlier and more efficiently.”
— Bob, SOC Practice Lead
Our offer
Match made in heaven? We reward that!
Competitive salary: enhanced with numerous benefits.
Company car with charging pass: so you’re covered on the road.
Hybrid work environment: avoid traffic jams.
Continuous learning opportunities: a wide range of training options to keep you growing.
Legendary team-building activities: quarterly fun events that have become the stuff of spotit legends.
A passionate team of experts: ready to share their knowledge and passion for what they do best.
