Security Engineer (warm seat)

Project overview

The assignment focuses on strengthening the Security Operations Center (SOC) for RIVM, KNMI, CTGB, and the planning agencies.

Profile of the suited interim professional:

• Connecting existing and new data and information sources to the SOC tooling
• Automating the processing of data within tools like Splunk, Elastic, and Microsoft Sentinel
• Optimizing and further developing connected data sources
• Setting up and improving the SOC tooling used
• Detecting suspicious or malicious activities to enable timely action
• Insight into which system information, such as logs, contributes to better detection of unwanted actions
• Skill in filtering and correlating data and loading it into SIEM tables
• Demonstrable experience with setting up logging and alerting in Sentinel, Elastic, or Splunk with Infrastructure-as-Code (Terraform and/or Bicep) and CI/CD pipelines
• Minimum HBO work and thinking level
• Demonstrable knowledge of security, for example through training like CompTIA Security+
• Broad IT knowledge in the field of cloud environments, Linux, Windows, networks, and containers/Kubernetes
• Preferred: master's degree in an IT security-related field, such as Computational Science
• Preferred: knowledge of network infrastructures, firewalls, and Vnet
• Preferred: experience with scripting and automation (Python, Bash, Yaml, Json, Ansible)
• Preferred: knowledge of Azure/Sentinel and Splunk/Elastic

Project details

• Start: flexible
• Duration: 3 months
• Location: Utrecht, Utrecht, Flevoland, NL
• Languages: Dutch