Senior Security Operations Engineer (Remote - Netherlands)

Work hours are aligned to the UK (EMEA) time zone. This role sits within the security operations team of a publicly listed company that builds Internet of Things (IoT) platforms for businesses running physical operations such as transportation, construction, field services and manufacturing. You will work with a global group of engineers to detect and respond to security events, and you will act as incident commander for serious incidents. You will also support investigations led with Legal, HR and Compliance teams.

What you'll do

• Monitor security events and provide technical analysis of alerts
• Lead information security incidents and insider investigations, from response strategy through to closure, keeping key stakeholders updated
• Give clear, concise security guidance for incident response and insider threat work
• Build services, integrations and tooling that support security operations, incident response and insider threat detection
• Create and maintain runbooks and automated workflows, and help refine processes
• Take part in a weekend on-call rotation, including out-of-hours response to high-severity incidents

What you need

• 5+ years of experience in security incident response, with practical experience leading incidents and coordinating across teams
• Proficiency in Python for building scripts and tools that support investigations
• Forensic analysis skills on macOS, Windows and Linux, plus experience reviewing logs in SIEM tools
• Experience with cloud architecture and security on AWS or GCP
• Ability to explain findings and strategy to technical staff, executives and legal teams, and to mentor other engineers
• Residence in the Netherlands and ability to work UK-aligned hours; a degree in a related field or equivalent experience is welcome

How to apply

Sign up free on i'llTip to see the employer's details and apply. i'llTip's AI can tailor your résumé to this job, and you'll get alerts for similar roles.