Lead Security Engineer Cybersecurity & NIS2

Project overview

As Lead Security Engineer, you will contribute to cybersecurity within the Large Consumers & Grids value chain of Enexis.

Profile of the suited interim professional:

• Collaborate with product teams and stakeholders to implement information security
• Monitor and improve the security requirements of applications within the value chain
• Perform risk and threat analyses for new or modified functionalities
• Implement security measures to ensure confidentiality, integrity, and availability
• Support DevOps teams with secure coding, access management, and encryption
• Automate controls, security tests, and compliance checks within CI/CD processes
• Ensure the value chain complies with the Enexis Integral Framework and laws and regulations such as NIS2
• Support DevOps teams in implementing Security by Design
• Translate security guidelines and policies into concrete measures for development teams
• Coach teams in increasing their security knowledge and responsibility
• Create buy-in for security by involving teams in the underlying reasons
• Stimulate knowledge sharing and security awareness within the value chain
• Act as a point of contact and sparring partner for information security issues
• HBO (higher professional education) work and thinking level
• Broad experience in ICT, with at least three years in a similar security role
• Knowledge of information security, cybersecurity frameworks, and risk management
• Experience with NIS2 or similar compliance and security guidelines
• Practical experience with security testing tools such as SAST, DAST, and vulnerability scanning
• Experience with automated execution of controls and tests within CI/CD environments
• Knowledge of application security, encryption, identity & access management, and secure software delivery
• Strong analytical skills and pragmatic problem-solving
• Ability to make complex security issues understandable for various colleagues
• Experience with guiding or coaching teams in change or improvement processes related to security or compliance
• Strong communication skills and persuasive power without hierarchical control
• Organizational sensitivity and talent for connecting stakeholders
• Certifications such as Security+, SSCP, CISSP, or CSSLP (preferred)
• Experience with SAFe Agile working (preferred)
• Experience with complex IT landscapes, legacy, and cloud (preferred)
• Knowledge of SAP security and/or DevSecOps (preferred)

Project details

• Start: flexible
• Location: Noord-Brabant, Brabant, Limburg, Zeeland, NL
• Rate: 103-103 EUR/h
• Languages: Dutch