Technical Security Officer

Your job will involve identifying, validating and prioritising security exposures, so that risks can be demonstrably and effectively reduced on the basis of business impact. You’ll act as our discipline expert and architectural advisor, and you’ll challenge our IT teams to systematically manage security risks.

Your rokle

Continuous Threat & Exposure Management (CTEM)

- Developing, implementing and maintaining the CTEM framework within SIDN;

- Coordinating the entire CTEM cycle:

• Discover: investigation of attack surface and exposure;

• Prioritise: risk-based prioritisation within the business context;

• Validate: exposure validation, e.g. using Pentera;

• Mobilise: coordination of mitigation measures with IT teams;

• Monitor: continuous adjustment and refinement.

- Determining whether vulnerabilities are actually exploitable within the SIDN context.

Vulnerability Management

- Taking ultimate responsibility for the vulnerability management process:

• Analysing scan results;

• Interpreting findings;

• Advising on mitigation measures.

- Prioritising vulnerabilities on the basis of:

• Exploitability;

• Attack routes;

• Threat relevance;

• Business impact.

- Monitoring progress and effectiveness of measures undertaken.

- Architecture and advise:

• Advising on technical and architectural decisions and their implications for exposure and risk;

• Helping IT teams to make secure design and implementation decisions;

• Acting as a sparring partner for the CISO and the Security Services team.

- Collaboration and communication:

• Actively liaising with IT teams and platform teams about risks and priorities;

• Translating technical findings into understandable risk statements for management;

• Preparing reports on exposure status and risk reduction.

- Automation and tooling:

• Effective deployment and management of CTEM and exposure tooling (e.g. Pentera);

• Initiating automation and scripting (e.g. PowerShell, Python, APIs) where they can improve effectiveness;

• Continuous improvement of processes and working methods.

- Knowledge-sharing and mentoring:

• Sharing knowledge and best practices within the Security Services team;

• Contributing to the further professionalisation of security competences within SIDN.

- Powers:

• Advising on architecture, design and mitigation decisions;

• Initiating improvements in the field of exposure and vulnerabilities;

• Identifying and escalating unacceptable risks to the CISO.

Our core values of customer focus, trustworthiness, innovation, independence and professionalism strike a chord with you. And you want to keep learning and developing. If that sounds like you, you'll fit right in! Because we allow people to be themselves.

You'll also have:

• Higher vocational working and reasoning ability;

• At least 3 to 5 years' experience working in a similar role.

Discipline-specific

Thorough knowledge of:

• Vulnerability Management;

• Continuous Threat & Exposure Management.

Extensive basic technical knowledge of:

• Network and infrastructure security;

• IAM / PAM;

• Cloud security;

• Endpoint security;

• Application security.

Knowledge of attack chains and exposure thinking.

Experience of exposure validation and security testing (e.g. Pentera).

Skills:

• Strong analytical skills and risk-based working capability;

• Ability to clearly communicate complex technical risks;

• Architectural thinking ability;

• Experience of scripting and automation is desirable.

Personal competences:

• Challenger mindset in relation to IT (critical, constructive);

• Persuasiveness and teamwork-focused mindset;

• Pragmatism and result-focused mindset;

• Coaching ability and openness to knowledge-sharing;

• Independence combined with commitment to the organisation’s interests.

Result fields:

• Accessible, validated overview of exposure and vulnerabilities;;

• Effective risk-based prioritisation of security measures

• Demonstrable reduction in exploitable risks;

• Improved collaboration between Security and IT.

For us, it's all about balance. Balance between hard work and relaxation, between performance and reward, between your ambitions and ours, between an inspiring office environment and the convenience of working from home, and of course between professional and private life. As well as utilising the latest, proven internet technologies, we also work with modern IT systems for easy collaboration, remotely, physically and in hybrid forms. We also make sure that our people have well-equipped home workstations, plus access to an office space with everything they need to get together, collaborate and inspire each another.

If you want to go running or visit granny during office hours, we're okay with that. And if you fancy a workation, that can be arranged. As long as you live up to your professional responsibilities, we'll work out between us exactly how and when you do your work. And we're not fans of annual performance appraisal. What really matters is year-round personal development and results. Where you take the lead. It’s a philosophy that our personnel really like: Effectory designated us a Worldclass Workplace for 2025-2026. Recognition for our passion and outstanding employment practices.

Pay and other benefits

What’s in it for you? First, ample opportunity for growth and skills development. After all, you'll be helping us take our IT set-up in a whole new direction. On-the-job growth will go hand-in-hand with training-based personal development -- for which we have a generous budget! There's an attractive benefits package as well:

• Gross monthly salary of up to €5,800, depending on experience

• Holiday pay of 8 per cent, plus a thirteenth salary payment

• A variable collective bonus of up to 4 per cent

• An attractive extra bonus if you introduce us to a new colleague

• A basic holiday allowance of 25 days, plus scope for building up to 13 days' occasional leave entitlement, if you work full time

• A pension with ABP

• A business rail card if you come to work by public transport

• A travel allowance if you come to work using your own transport

• Travel allowance of €0.33 per kilometre for business travel

• A PluralSight licence and the opportunity to acquire other certificates

• A daily home working allowance for every day that you work from home

• A complete, healthy home workstation

• €55 a month (net) for your home broadband

• €25 a month (gross) contribution to your health insurance

• Additional parenthood leave on full pay

• An optional cycle lease scheme, where SIDN covers 50 per cent of the lease cost, up to a maximum of €60 (gross) per month

• €500 a year to donate to a good cause of your choice

• Your own .nl domain name and hosting package

• Ample education and training opportunities

• Professional coaching and budget coaching

• A relocation allowance if taking the job means moving house

Everything above is for a full-time role (40-hour week).

The selection procedure includes screening, which involves obtaining a Certificate of Good Behaviour (similar to a criminal record check), and performing reference and integrity checks.