Security Engineer – Workplace Services

Are you ready to shape the future of modern workplace technology? For our team in Amsterdam we are looking for a Security Engineer work with various components of our Security Services with a strong focus on risk employee experience, and operations at scale.

As a Security Engineer, you will contribute with the strategic product vision and backlog for Security Services across our global organization. You’ll work at the intersection of Defender components and Purview features, ensuring a seamless, secure and compliant, and scalable employee experience for our workforce.

The team
Within People & Hubs/Workplace Services, we are looking for a new Security Engineer to contribute with the product vision and backlogs for Microsoft Defender 365 suite and Microsoft Purview. The Security Engineer is part of a global team that is based in The Netherlands and Philippines. The Security Engineer forms a team with the Product Owner for Security, the IT Area Lead, the Chapter Lead, and of course the engineers in the squads to define and drive the strategic product vision and backlogs of the services in Workplace Security Services.

Roles and responsibilities

• You are maintaining and improving our services as part of a cross-border squad of peers and customer journey experts. Employee satisfaction is key to us!

• SaaS vendors constantly release new features; you will help to keep up and preferably stay ahead with our own feature requests to them.

• You and your colleagues will be developing the services for the future, automating, and simplifying them, as well as making them more robust and secure.

• You will be responsible for managing vulnerabilities on endpoints. This includes identifying affected devices based on CVEs, coordinating within the Tribe a communication strategy to notify impacted users, handling of correlated tickets, and responding to emails. You will play a key role in ensuring timely mitigation and clear communication around endpoint vulnerabilities.

• We are a valued partner for many of the big suppliers, such as Microsoft, JAMF and others. You are in frequent contact with their key staff / product groups.

• We are a bank, so we are highly regulated - we must be, if we want to safeguard our clients’ data. This requires thorough administration and strong processes; can you automate these and make them less of a burden?

• No day will be the same, we work agile. We stimulate proactivity - you have the freedom to choose your own course of action for projects and other tasks whenever possible.

• We provide a 24/7 global service. You will also share the responsibilities of the team in solving 3rd line incidents on a rotation-based scheme, doing administration and participate in standby services.

How to succeed
We hire smart people like you for your potential. Our biggest expectation is that you’ll stay curious. Keep learning. Take on responsibility. In return, we’ll back you to develop into an even more awesome version of yourself.

Education and experience

• You have a degree in Computer Science, Business Administration, IT Audit or a related field or equivalent work experience.

• You are familiar with endpoint protection platforms (preferably Microsoft Defender) and have experience working with ticketing systems and incident response workflows.

• You are familiar with Microsoft Purview capabilities, including but not limited to Data Loss Protection (DLP), Information Protection, Insider Risk Management and others.

• You have experience collaborating with communication or customer-facing teams to coordinate user notifications and follow-up actions related to security incidents.

• You have hands-on experience with vulnerability management tools and processes, particularly in identifying, assessing, and remediating endpoint vulnerabilities based on CVEs.

• You have IT experience with Microsoft 365 technology in an enterprise-level multinational organisation, including relevant certifications to show for it; this is both Microsoft 365 as well as security certifications (such as CISSP, CISM, etc.).

• You understand the principles of outsourcing on operational, tactical, and strategic levels with E2E accountability of the WPS Services delivered across multiple external and internal parties.

• You have worked in highly regulated environments like financial institutions before.

Personal skills

• You are detail-oriented and capable of managing multiple vulnerability cases simultaneously, ensuring timely follow-up and resolution.

• You are comfortable translating technical vulnerability data into clear, actionable communication for both tech