Key Skills

Job Description

Department: Cyber Services and Capabilities Location: NLD Rijswijk Description The TAM is the customer's technical owner for the service and the expert voice in the relationship. They quantify the customer's security maturity through the TAM Score framework, build and steer a defensible 12-month technical roadmap, and provide the depth of Microsoft Azure Sentinel/Defender XDR expertise needed to advise credibly on priorities. TAMs translate data into narrative - interpreting scores, surfacing the highest-leverage gaps, and guiding customers toward measurable improvement quarter by quarter. They act as a technical buffer between customers and internal operational teams by resolving technical queries, advising on improvements, and ensuring issues are properly packaged when escalation is required. Key Responsibilities Own the technical relationship: understand the customer environment end-to-end, maintain technical context, and operate as the trusted advisor in the partnership. Own the TAM Score narrative: interpret Environment, SOC, and Health scores into a credible story about where the customer stands and where to focus next - accountable for the quality of the diagnosis and recommendations, not the absolute score. Build and maintain the 12-month technical roadmap: anchored to the TAM Score, with defined quarterly focus areas tied to the highest-leverage gaps. Deliver the TAM/technical portion of Quarterly Business Reviews: present the score, narrate progress, and align with customer stakeholders up to CISO/senior IT leadership. Deliver reactive technical support via tickets (troubleshooting, investigation support, remediation guidance). Deliver proactive technical expertise and drive continuous improvement (Tier A included): posture and coverage advisory, tuning/noise reduction, cost/retention optimisation, automation uplift. Own technical deliverables: automation/playbooks where in scope, custom analytics and workbooks. Drive the operational health-check catalogue as scheduled workstreams within the roadmap. Advise on Defensive Breadth gaps (pentest cadence, IR retainer, EASM, DLP, tabletops, etc) - surfacing risk credibly and identifying where NCC services can close the gap. Maintain and refresh the threat overview as the customer's environment and threat landscape evolve. Skills, Knowledge & Expertise Proven experience in cybersecurity, IT operations, or managed security services Background in a customer-facing technical role (e.g. TAM, Security Consultant) Experience engaging senior stakeholders (CISO, Head of IT/Security) Strong understanding of SOC operations, threat detection, and incident response Ability to understand end-to-end customer environments (cloud, infrastructure, security stack) Experience with security tools (e.g. SIEM, EDR, SOAR, DLP, vulnerability management) Able to interpret and translate security metrics into clear risk-based narratives Proven ability to build and maintain 12-month technical roadmaps with quarterly focus Strong skills in data analysis, prioritisation, and identifying high-impact improvements Experience delivering Quarterly Business Reviews (QBRs) to senior audiences Ability to act as a trusted advisor, owning the technical customer relationship Experience balancing reactive support (tickets, troubleshooting) and proactive improvement Capability to deliver continuous improvement initiatives (tuning, optimisation, automation) Experience creating technical deliverables (playbooks, dashboards, analytics, reports) Knowledge of defensive security domains (pentest, IR, EASM, DLP, tabletop exercises) Ability to identify security gaps and align solutions/services to mitigate risk Strong communication and storytelling skills, adapting for technical and non-technical audiences Familiarity with service management practices (e.g. ITIL, ticketing systems) Relevant certifications (e.g. CISSP, CISM, Security+, cloud security) – desirable Proactive, accountable, and customer-focused mindset with strong ownership Job Benefits Flexible working hours and hybrid working arrangements. Competitive pension scheme. 24 vacation days, 4 additional leave days for business closure, and 8% holiday allowance. A company laptop and mobile phone. An internet allowance of up to €40 per month. Extensive development opportunities through our Academy. Access to training courses, certifications, TechTalks, and industry events. An informal, professional, and inspiring work environment with engaged colleagues. We review every application received and will get in touch if your skills and experience match what we’re looking for. If you don’t hear back from us within 10 days, please don’t be too disappointed – we may keep your CV on our database for any future vacancies and we would encourage you to keep an eye on our career opportunities as there may be other suitable roles. To ensure a fair and consistent assessment process, candidates must not use AI tools to generate, suggest, coach or provide responses during live or recorded interviews unless this has been approved in advance, by the hiring team. For more information please read our AI in Hiring - Candidate Policy. If you do not want us to retain your details, you can utilise the Manage Your Data tool provided by Pinpoint or contact us directly at: [email protected]. All personal data is held in accordance with the NCC Group Privacy Notice. We are committed to diversity and flexibility in the workplace. If you require any reasonable adjustments to support you during the application process, please tell us at any stage. Please note that this role involves mandatory pre-employment background checks due to the nature of the work NCC Group does. To apply, you must be willing and able to undergo the vetting process.

Core Responsibilities

Own the customer's technical relationship, interpret security maturity scores, and build and maintain a 12-month roadmap with quarterly priorities. Provide reactive technical support and proactive security improvements, deliver technical work and QBR presentations, and advise on defensive security gaps and risk reduction.

Requirements

Candidates should have proven cybersecurity, IT operations, or managed security services experience, including customer-facing technical work and engagement with senior stakeholders. They should understand SOC operations and security tools, translate metrics into risk-based recommendations, build roadmaps, deliver QBRs and technical improvements, and communicate effectively; relevant security or cloud certifications are desirable.

Benefits

• Flexible Working Hours
• Hybrid Working Arrangements
• Competitive Pension Scheme
• 24 Vacation Days
• Four Additional Leave Days
• 8% Holiday Allowance
• Company Laptop
• Company Mobile Phone
• Internet Allowance Up To €40 Per Month
• Development Opportunities Through The Academy
• Training Courses
• Certifications
• Tech Talks
• Industry Events