Cyber Defense Specialist (Attack Surface Management)

Project overview

For our end client Enexis, Harvey Nash is looking for a Cyber Defense Specialist (attack surface management)

Please note! Please send responses via the website, including the following information:

Availability in hours per week

Has the candidate worked for Enexis before?

Holiday plans within the next 3 months

Expected start date: ASAP

Duration of the assignment: 12 months

Option for extension: yes

Number of hours per week: 32 to 40

Location of work: Weert

On-site or from home: 50/50

Freelancer possible: no

Direct Hire: yes

Deadline for proposing candidates: 30/11-15:00 (ongoing)

Job scale: 15

Target rate (all-in, including travel and parking costs and any overnight costs, excluding VAT): 98.66 max rate

Cyber Defense Specialist (Attack Surface Management)

With your energy, it's possible

Do you want to secure the digital backbone of the Dutch energy network with your expertise? Enexis is at the heart of the energy transition, in a unique landscape where corporate IT and industrial Operational Technology (OT) meet. To protect our vital infrastructure, we are building a Cyber Attack Surface Management (CASM) team. We are looking for several security professionals to help us oversee and manage the playing field.

This is how you will tackle this challenge

Your mission is to, together with the team, map, analyze, and help reduce our attack surface. You will contribute to our proactive security approach by identifying a wide range of technical findings such as vulnerabilities and misconfigurations in our technical IT and OT infrastructure, analyzing them based on risk in the context of Enexis, and actively advising teams on solutions. This way, you help make our organization more resilient every day.

You have experience in:

Vulnerability scanning & analysis

Analyzing and triaging scan results, and enriching vulnerabilities with context and threat intelligence (e.g., with CVSS, EPSS).

Validating fixes and advising management teams on the most effective remediation and mitigation steps.

Asset discovery

Configuring and managing asset discovery tools to gain insight into endpoints, servers, network equipment, and cloud resources.

Analyzing discovery data to identify 'shadow IT' and performing reconciliation with the CMDB.

Data analysis & scripting

Analyzing and correlating data from various security sources (scanners, CMDB, threat feeds) to form an integrated risk picture.

Building and maintaining dashboards (e.g., in Power BI, Splunk, or ServiceNow) for operational and tactical reporting.

OT security (or the willingness to learn)

Understanding the unique challenges of security in OT environments (e.g., the need for non-intrusive scanning).

Experience in analyzing vulnerabilities in IT-for-OT systems and industrial components is a big plus.

Collaboration & communication

Effectively coordinating and collaborating with a wide range of technical management teams within the IT and OT environment, the SOC, and security architects to discuss findings and coordinate follow-up.

This is how you approach it

We have room for both IT security professionals and OT security professionals. Experience in both domains is not a requirement. We consider it more important that you have a solid foundation in one of these fields and the motivation to develop further.

You are a security professional who gets energy from technical analysis and from collaborating to reduce risk. You bring:

Knowledge of vulnerabilities within the IT environment: from IT security (such as networks, Cloud, OS) and you understand the nature of common vulnerabilities and how they can be exploited.

Knowledge of Operational Technology (OT): You have knowledge of or a strong interest in the world of OT. You understand that a high-voltage substation is different from an office environment and have the ambition to specialize further in this.

Affinity with security tooling: You are practical and familiar with the function of tools such as vulnerability scanners. You are familiar with scripting (e.g., Python) to analyze data.

Analytical and communicative skills: You find it interesting to analyze data and are able to translate technical findings into understandable advice for colleagues.

This role focuses on 2 or 3 of the following areas:

Technical assessments: You contribute to performing technical assessments across our IT and OT landscape. You help analyze results and identify risks.

Translating vulnerabilities & advising: You help translate technical vulnerabilities into concrete risks and advise the business and solution groups on possible solutions.

Collaborating & liaising: You work with the central CASM team that is currently being built, the SOC, and the decentralized administrators in both the IT and OT worlds.

Strengthening & improving: You contribute to optimizing our CASM processes, tooling, and reporting.

You will put your shoulders to the wheel with

The CASM team and a broad network of colleagues within Enexis. You will work closely with your fellow specialists, the IT SOC, OT SOC, and various engineering teams in Weert, Den Bosch, or Zwolle if necessary. We work in a diverse and inclusive work environment, in which you must be proficient in both Dutch and English.

We offer flexibility in how you arrange your workspace. Depending on the work and in consultation with your manager, working from home is possible.

Interested? We would like to receive a CV and the following information (without this information, the CV will not be processed):

Earliest possible start date

Rate all-in (incl. travel, parking costs and any overnight costs, excl. VAT)

Project details

Motivation

Two references will be requested during onboarding

• Start: ZSM
• Duration: 12 maanden
• Remote: hybrid
• Location: Weert, Limburg, NL
• Languages: Dutch