Security Engineer

Project overview

The Cloud Center of Excellence (CCoE) is a team of Cloud Engineers and Architects who, at SSC-ICT, realize a stable and scalable cloud foundation in a short period. Simultaneously, cloud solutions for clients and internal workloads are deployed here. The CCoE concept is a standard delivery model, based on best practices, offering an automated approach to implementing, managing, and operating the Microsoft Azure platform. This leads to the effective and efficient onboarding of Azure workloads (applications/solutions).

It utilizes DevOps principles combined with cloud-native service management and security controls to enable SSC-ICT to deliver products and services with speed, flexibility, and security.

We are looking for an expert and driven Cloud SecOps Engineer to strengthen our Azure Cloud Center of Excellence team. This team is dedicated to strengthening and optimizing the security of our Azure platform. We expect the perfect candidate to have a solid foundation in cloud security, practical experience with Azure services, and an enthusiasm for staying up-to-date with the latest security guidelines.

Responsibilities

SSC-ICT

To continue serving our ministries well, we want to further develop. We do this in interaction with our clients, the ministries. Because we are the ICT service provider of and for the government, and are proud of our public task and the large-scale projects that matter.

The origin of SSC-ICT

At the beginning of this millennium, all ministries managed their ICT workplaces for their civil servants independently. To create one efficient and uniform line for this service, the various ICT organizations bundled their activities. Over the years, there have been various compositions and names, but since 2014 SSC-ICT has been a fact.

Where are we now?

SSC-ICT has grown into an organization of approximately 1,200 employees and contributes to a modern government with secure, flexible, and effective ICT services. We provide these services to the following ministries:

ICT must always be available and is increasingly crucial for the primary processes of these ministries. Our government colleagues work at various locations and on different devices: via desktop and laptop, but also on tablets and smartphones. Speed and flexibility are becoming increasingly important. Providing ICT for and with the government is a challenging task. The field of work is diverse and the security requirements are high.

Where are we heading?

SSC-ICT is growing into one organization with one face. We continue to work on a transparent way of working and optimal service delivery: standard where possible, custom where necessary. The ministries rely on our secure, reliable ICT services that are always available. The goal: to deliver stable ICT services in a rapidly changing digital world.

"We do this by working together, learning from each other, focusing on the user experience, and above all, by enjoying our work!"

SSC-ICT Business Unit IT Infrastructure Services (BIS)

This business unit's main task is to provide technical services for standard and custom service delivery.

• Active role in Azure platform security:
• Proactively identify vulnerabilities, threats, and risks.
• Manage security controls (network security, access controls) to mitigate risks.
• Monitor and improve the security posture and policy compliance of Azure platforms and workloads.
• Azure Policy management and compliance:
• Define, implement, and enforce security policies in Azure using Azure Policy.
• Ensure all resources comply with security standards and compliance requirements.
• Work with Policy-as-Code and EPAC and translate BIO2, Cbw, and other compliance requirements into technical Azure controls.
• Investigate and follow up on non-compliance and manage policy exemptions, risk acceptances, and mitigating measures.
• Monitoring workbooks and reports:
• Develop and maintain monitoring workbooks and reports for security insights.
• Utilize Azure Monitor, Defender for Cloud, and other tools for actionable insights.
• Develop and maintain KQL queries, dashboards, analytics rules, and reports on vulnerabilities, incidents, and compliance.
• Monitor logging coverage to the designated workspaces.
• Incident response and threat management:
• Identify, investigate, and mitigate security incidents and breaches.
• Use Microsoft Defender for Cloud for monitoring, root cause analysis, and corrective actions.
• Support incident classification, escalation, containment, recovery, and reporting, and apply MITRE ATT&CK to improve detections and SOC use cases.
• Continuous improvement:
• Stay up-to-date with industry trends, emerging threats, and Azure security features.
• Review and improve security strategies and processes.
• Collaboration and communication:
• Work closely with DevOps, Network, and Compliance teams.
• Communicate security concerns and updates to stakeholders.
• Transfer knowledge to DevOps teams and translate technical security risks into understandable advice and reports.
• Security automation:
• Implement automation scripts for vulnerability assessment, patch management, etc.
• Utilize Azure Automation and other technologies for consistent security practices.
• Set up repeatable security controls and security gates in CI/CD, including IaC, secret, dependency, and container scanning, and SBOM/AIBOM control.
• Interior and Kingdom Relations
• Justice and Security
• Foreign Affairs
• Infrastructure and Water Management
• Social Affairs and Employment
• Health, Welfare and Sport
• Finance

Requirements

Wishes

Competencies:

• Minimum Bachelor's or Master's work and/or thinking level
• Microsoft Certified: Azure Security Engineer Associate (AZ-500) Certificate obtained
• Microsoft Certified: Azure Administrator (AZ-104) Certificate obtained
• Relevant experience with security and compliance standards applicable to the public sector such as BIO, ISO27001, and/or NIS2.
• Relevant experience with: Azure services and cloud security best practices.
• Azure Policy-as-Code (EPAC/AzOps)
• Relevant experience with Azure Policy-as-Code (EPAC/AzOps)
• Relevant experience with Microsoft Defender for Cloud
• Relevant work experience in translating security risks and compliance requirements into actionable technical measures and administrative advice. (To be assessed in an interview)
• Candidate understands the assignment and fits within the organization.
• You are technically and analytically strong and can reduce complex security issues to workable and reliable solutions.
• You work accurately and structured, ensuring high quality configurations, scripts, changes, and technical documentation.
• You take initiative and show ownership in solving technical bottlenecks and improving security provisions.
• You communicate clearly and can explain technical choices understandably to colleagues and stakeholders.
• You are eager to learn and continuously develop yourself in security technology, automation, and new forms of threats.
• You coordinate well with analysts, administrators, architects, and suppliers. You actively seek collaboration to achieve sustainable solutions.

Project details

• Start: 2026-10-31T23:00:00
• Location: Den Haag Zuid-Holland, NL
• Languages: Dutch