Security Engineer (detach.)

Project overview

Strengthen and professionalize the Security Operations Center (SOC) within the judicial ICT organization.

Profile of the suited interim professional:

• Analyze and handle complex security events and incidents
• Implement improvements in the ELK environment, detections, logging, and automation
• Improve the security logging chain, such as onboarding log sources and developing pipelines
• Perform Cyber Threat Intelligence and threat hunting activities
• Build technical connections and automations in Python/Node-RED
• Set up, test, and maintain Elastic Ingest Pipelines and Logstash configurations
• Connect and normalize various log sources for SIEM detection
• Maintain and improve SOC processes through scripting and automation
• Participate in the rollout and maintenance of security tools within Kubernetes/OpenShift
• Guide Level 1 and 2 employees
• Represent the SOC in internal consultations
• HBO work and thinking level
• Expert knowledge of Elastic, Logstash, and Kibana (ELK)
• Minimum 5 years of demonstrable experience as a Security Engineer/Analist in large-scale (semi-)governmental organizations and complex technical (network) environments
• Minimum 3 years of expert knowledge of Elastic, Logstash, and Kibana
• Experience with container infrastructures and creating and troubleshooting deployments
• Experience with Elastic XDR technology and using Elastic in combination with Fleet
• Knowledge of Azure Sentinel within an MSSP environment is recommended
• Knowledge of Microsoft Sentinel in an MSSP environment is a plus

Project details

• Start: flexible
• Duration: 12 months
• Location: Soesterberg, Utrecht, Flevoland, NL
• Languages: Dutch