Ethical Specialist

Project overview

Assignment Description

As a security Engineer, you will work with a multidisciplinary team on our important network infrastructure. This way, you ensure that our infrastructure meets high quality standards, is always available and secure. Within our 'High-Classified Information Systems' infrastructure subsection HGI System Development, you will use your network experience and knowledge to make the Netherlands safer. Your role is crucial for our soldiers, anywhere in the world, at any time, under all circumstances. This involves offensive Security activities in the development of HGI (High-Classified Information Systems).

The activities include:

Finding and exploiting vulnerabilities in Windows applications and domains, Linux IoT, AI systems, radio systems, OT systems, and web apps.

Identifying and resolving vulnerabilities.

Python, Bash, and PowerShell scripting to automate tasks and develop/integrate tooling.

Exploit development in C++ and Python.

As a Security Engineer, you will be deployed to contribute your unique knowledge and experience to the complete transformation towards a single, future-proof network landscape.

The results required in this assignment are not just material. It is important in this assignment that work is done on a shared understanding of each other and of the situation and context in which the relevant matters take place, so that this leads to shared starting points as a foundation for strengthening collaboration.

Background of the assignment

The HGI section develops Command and Control (C2) systems for land, air, and maritime operations within Defense for operational command. In addition to these C2 systems, the supporting (communication) infrastructure is also developed and supported for the deployed domain. This HGI (High-Classified Information Systems) network is used in the deployed field domain (semi-static) in military missions and exercises of the Army, Air Force, and Navy.

Within HGI, the following areas of attention are recognized: Network infrastructure, Platform, Management and Control, and Applications including telephony, Microsoft Office environment, email, and SharePoint.

Characteristic of HGI are the tools to plan the Communication and Information Systems (resources, topology, and configurations), to record the information needs of a mission with associated roles and rights, and to provide for the automatic installation of the complete IT infrastructure.

The need to do this for more Defense IT infrastructures is increasing, and in the coming years, the high-classified information systems must align better.

Responsibilities

Evaluate information security risks, threats, and consequences and take appropriate measures.

Provide training and information on information security.

Provide technical validation of security tools, implement, configure, and manage suitable tools.

Contribute to the definition of and actively promote information security standards and procedures in the IT and IT user communities.

Identify and remediate security vulnerabilities.

Monitor security developments to ensure the continued efficiency and effectiveness of information security processes and controls.

Proactively evaluate new threats and anticipate potential information security incidents.

Implement security techniques on all or part of an application, process, network, or system within the domain of responsibility.

Requirements

eCF profile: Information Security Specialist

Reference Area: B.06 System Building

This assignment is based on the European e-Competence Framework (e-CF). This is a European standard for describing IT competencies and the associated level of responsibility. The eCF profile indicates which competencies and at what level (e-1 to e-5) are expected from the candidate. We expect candidates to clearly demonstrate that they possess these competencies in their CV. This can be done by describing for each relevant assignment or position:

CVs in which the required eCF competencies cannot be demonstrably found cannot be fully assessed for suitability.

Candidate has at least 4 years of demonstrable work experience with the chosen eCF profile similar role.

Candidate preferably has work experience with:

Finding and exploiting vulnerabilities in Windows applications and domains, Linux IoT, AI systems, radio systems, OT systems, and web apps.

Identifying and resolving vulnerabilities.

Python, Bash, and PowerShell scripting to automate tasks and develop/integrate tooling.

Exploit development in C++ and Python.

Candidate has demonstrable work experience with Linux.

Additional information

Hybrid working: Yes

Frequency of remote work days: 2 days MAX

On-call services: N/A

• the role the candidate fulfilled
• the tasks and responsibilities involved
• the extent to which these align with the required eCF competencies and the level

Project details

• Start: 2026-11-30T23:00:00
• Location: Amersfoort Utrecht, NL
• Languages: Dutch

The subsection High-Classified Infrastructure

By making assignments clear and concrete early in the process, we facilitate the teams to deliver optimally in terms of technology, volume, quality, and predictability. The Platform Engineer plays an important role in this.

Generic description of competence area and levels

Engineers software and/or hardware components to meet the requirements of the solution, such as specifications, costs, quality, time, energy efficiency, information security, and data protection. Follows a systematic method to analyze and build the required components and interfaces. Builds system structure models and performs system behavior simulation. Performs unit and system tests to ensure that requirements are met.

Summary of task and mission

Guarantees the implementation of the organization's information security policy through the secure and correct use of ICT resources. Defines, establishes, and implements necessary information security techniques and practices in accordance with information security standards and procedures. Contributes to security practices, awareness, and compliance through advice, support, information, and training.

• System Development (HGI-SO) faces a challenging assignment to undertake a renovation 'while the shop is open'. This while our HGI SO technical specialists are in high demand and therefore a 'scarce commodity'. It is of the utmost importance that HGI-SO increases its delivery reliability, as both operations and chain partners need us to realize strategic plans. We are therefore optimizing the organization and working methods of the subsection. The working title for this is: 'Pleasant Work
• Ever Smarter
• (Doing) the Right Things'. We want to optimally organize and facilitate the teams that carry out the production so that they can deliver quality focused on their field.