Required skills
- Microsoft Sentinel
- Splunk
- Elastic
- Terraform
- Bicep
- CI/CD
- Infrastructure as Code
- Kubernetes
- Linux
- Windows
- Microsoft Azure
- Python
Languages: Dutch
Job description
The RIVM is looking for a Security Engineer to connect and optimize data sources for their Security Operation Center (SOC). The role involves ensuring automated processing of data by SOC tooling like Splunk/Elastic and Sentinel to detect malicious activities.
Project overview
This concerns an assignment for Engineering activities for the Security Operation Center (SOC) of RIVM, for RIVM, KNMI, CTGB, and the planning bureaus.
Background of the assignment:
To efficiently connect existing and new sources of data and information so that they can be automatically processed by the SOC's tooling (Splunk/Elastic) and Sentinel. After connecting, continuously optimize the data sources and set up the tooling so that unwanted actions by malicious actors are detected.
Requirements
General:
Specific:
Wishes:
Other quality functional wishes:
Competencies:
- Be able to form an understanding of the information that can be extracted from systems (including via logs), and be able to assess which information contributes to increasing the likelihood that unwanted actions are detected.
- Be able to use tooling to filter data, correlate it with other sources, and load it correctly into the SIEM system's tables.
- Demonstrable experience with setting up Logging & Alerting with one or more of these products: Sentinel, Elastic, or Splunk, using Infrastructure-as-Code (Terraform and/or Bicep) and CI/CD pipelines.
- Minimum completed HBO (higher professional education), preferably a Master's degree in an IT security-related field such as Computational Science.
- Demonstrable knowledge of security, e.g., through a CompTIA Security+ training.
- Demonstrable broad IT knowledge, showing that the candidate has experience with cloud environments, Linux, Windows, network environments, and containers/Kubernetes. Knowledge can be demonstrated with a recent CV.
- Willingness to further develop in Security Engineering / Security Analyst. To be demonstrated by a CV showing broad interest in IT.
- Knowledge of operating systems such as Windows/Linux/Kubernetes & Containers
- Knowledge of network infrastructures/firewalls/Vnet
- Knowledge of Scripting & Automation (Python/Bash/Yamls/Json/Ansible)
- Knowledge of Azure/Sentinel and Splunk/Elastic
Project details
- Start: 2026-12-06T23:00:00
- Location: Bilthoven Utrecht, NL
- Languages: Dutch
Indexed by 9am's meta-search. You are a job provider? Claim or manage this listing
Found on Striive (HeadFirst / Between)