Cloud Security Specialist

Project overview

Please note! This assignment is only possible on a secondment basis via StarApple. Subcontracting is not possible.

Assignment Description

As an AWS Cloud Security Specialist, you will be part of the second line of the Security Operations Center (SOC) at Alliander. Within the Cyber Resilience Center's Blue Team, you will be responsible for optimizing and maintaining security monitoring within the AWS environment. You will focus on developing and improving security monitoring use cases based on current threats and incidents. Additionally, you will analyze security incidents and advise the AWS team and over 200 development teams on appropriate security measures.

You will work closely with the first line of the SOC and transfer knowledge so that regular security alerts can be handled independently. This allows you to focus on more complex security issues and incidents. Within the Cyber Resilience Center, you will collaborate with security specialists and other experts on Alliander's digital resilience. You will maintain direct contact with the Product Owner of the AWS team, enabling you to act quickly and independently.

What will you do?

Hard requirements (only respond if you meet these)

Assignment details

• Optimize security monitoring within the AWS environment.
• Develop and maintain security monitoring use cases based on current threats and incidents.
• Analyze and handle security incidents within cloud environments.
• Advise the AWS team and over 200 development teams on appropriate security measures.
• Transfer knowledge to the first line of the SOC so they can handle alerts independently.
• Collaborate with the Product Owner of the AWS team to effectively implement security improvements.
• Minimum of 3 years of demonstrable hands-on experience with AWS Security, including Amazon GuardDuty and AWS CloudTrail.
• Knowledge of AWS within an enterprise environment.
• Experience with security incident analysis and incident response within cloud environments.
• Current knowledge of AWS and its associated architecture.
• Dutch language proficiency at a minimum B2 level. Candidates who understand Dutch and respond in English are also eligible.

Project details

As soon as possible after completion of the screening (planned start date 01-12-2026)

1 year from the actual start date

Hours: Preferably 40 hours per week; 32–36 hours is negotiable

Arnhem or Haarlem, minimum 2 days per week at the office

€80 - €100

Structure: Secondment

Screening: Extensive screening required, can take up to 6 weeks

Important for the offer

An application letter must be submitted with the offer, in which the candidate specifically addresses:

The motivation must clearly indicate which tasks the candidate has actually performed and within which professional environment this experience was gained.

• Their own hands-on experience with AWS Security Operations.
• Practical experience with Amazon GuardDuty and AWS CloudTrail.
• Experience with incident response based on alerts in CloudTrail and GuardDuty.
• Start: 2026-11-01T23:00:00
• Location: Arnhem Gelderland, NL
• Languages: Dutch