IT Cyber Defense Specialist Attack Surface Management

Enexis Group; Weert; Hybrid; EUR 55,000 - 79,000; Full time

Benefits offered by this job

Hybrid working

MacBook + phone

Remote working allowance

Pension (ABP 70% employer)

Job summary

Enexis Group in Weert seeks IT Cyber Defense Specialists focused on Attack Surface Management to map and reduce attack surface. You will work in a CASM setup, analyzing vulnerabilities, misconfigurations, and assets across IT and OT environments, with emphasis on technical remediation guidance.

The role requires 3–5 years in security, familiarity with vulnerability scanners, and scripting in Python. Hybrid work options, Dutch/English proficiency, and a chance to contribute to the Dutch energy

Qualifications

• 3–5 years of professional security experience.
• Knowledge of IT security areas including networks, cloud and operating systems.
• Experience with vulnerability scanners and scripting (Python).
• Ability to analyze data and translate findings into remediation actions.
• Desire to improve CASM capabilities.

Responsibilities

• Map and analyze the attack surface to identify risks.
• Identify vulnerabilities and misconfigurations; advise remediation.
• Build and maintain dashboards (Power BI, Splunk, ServiceNow) for risk reporting.
• Collaborate with IT SOC, OT SOC, and engineering teams.
• Support automation and integration of CASM tooling with IT systems.

Skills

3–5 years exp

IT security basics

Vulnerability scanners

Python scripting

CASM tooling

Education

HBO

Tools

Vulnerability scanners

Power BI

Splunk

ServiceNow

Job description

Enexis is looking for several security professionals for the role of IT Cyber Defense Specialist Attack Surface Management.

• Location: Weert
• € 4.953,- en € 7.076,-
• HBO
• 32 to 40 hour

Your energy makes a difference

Your mission is to work together with the team to identify and map our attack surface.

Would you like to use your expertise to secure the digital backbone of the Dutch energy grid? Enexis is at the heart of the energy transition, operating in a unique landscape where corporate IT and industrial Operational Technology (OT) come together. To protect our critical infrastructure, we are building a Cyber Attack Surface Management (CASM) team. We are looking for several security professionals to help us gain and maintain a clear overview of our attack surface and manage the associated risks.

We have opportunities for both IT security professionals and OT security professionals. Experience in both domains is not required. What matters most is that you have a solid foundation in one of these areas and the motivation to further develop your expertise.

This is how you take on the challenge

Your mission is to work with the team to map and analyze our attack surface and help reduce it. You contribute to our proactive security approach by identifying a wide range of technical findings, such as vulnerabilities and misconfigurations in our technical IT infrastructure. You analyze these findings based on risk and within the context of Enexis, and actively advise teams on appropriate solutions. In doing so, you help make our organization more resilient every day.

You preferably have experience in the following areas:

Vulnerability scanning & analysis

• Analyzing and triaging scan results and enriching vulnerability information with context and threat intelligence, for example using CVSS and EPSS.
• Validating fixes and advising operations and management teams on the most effective remediation and mitigation measures.

Asset discovery

• Configuring and managing asset discovery tools to gain visibility into endpoints, servers, network devices and cloud resources.
• Analyzing discovery data to identify shadow IT and reconciling findings with the CMDB.

Data analysis & scripting

• Analyzing and correlating data from different security sources, such as scanners, the CMDB and threat feeds, to create an integrated view of risk.
• Building and maintaining dashboards, for example in Power BI, Splunk or ServiceNow, for operational and tactical reporting.

Job requirements

This is how you approach it

You are a security professional who is energized by technical analysis and by collaborating with others to reduce risk. You bring:

• 3–5 years of relevant professional experience
• Knowledge of vulnerabilities within IT environments: You have knowledge of IT security areas such as networks, cloud and operating systems, and you understand the nature of common vulnerabilities and how they can be exploited.
• Affinity with security tooling: You are hands‑on and understand the purpose and use of tools such as vulnerability scanners. You are familiar with scripting, for example Python, to analyze data.
• Strengthening & improving: You continuously help develop and mature our CASM capability, with a strong focus on the technical side. You ensure that tooling is effectively configured and deployed, providing an increasingly complete and reliable view of our attack surface. You improve asset discovery, scanning, classification and data quality, integrate CASM tooling with other security and IT systems, and translate technical data into actionable risk insights and remediation actions. You actively identify opportunities to further automate processes, integrations and security analysis.

This role focuses on two or three of the following areas:

• Technical assessments: You contribute to technical assessments across our IT landscape. You help analyze the results and identify potential risks.
• Translating vulnerabilities into risks & providing advice: You help translate technical vulnerabilities into tangible risks and advise the business and resolution teams on possible solutions.
• Collaboration & coordination: You work closely with the central CASM team currently being established, the SOC and decentralized operations teams across both the IT and OT domains.
• Strengthening & improving: You contribute ideas and expertise to continuously improve our CASM processes, tooling and reporting.

Team & culture

The CASM team and a broad network of colleagues across Enexis. You will work closely with the IT SOC, OT SOC and various engineering teams.

Monday is our regular collaboration day in Weert. Arrangements for the other working days are made in consultation with the team. We offer flexibility in where you work. Depending on your activities and in coordination with your manager, working from home is possible.

We work in a diverse and inclusive environment in which you are expected to be proficient in both Dutch and English.

What do you get from us?

At Enexis, you'll be working at the forefront of one of the greatest challenges of our time: the energy transition. We believe in taking good care of our people, starting with a comprehensive onboarding package and introduction programme to help you get to know your colleagues. We also offer an attractive employment package, including:

• A gross monthly salary between €4,953 and €7,076 (based on a 40-hour work week).
• An additional 28.7% on top of your salary (8% holiday allowance, a 10.7% year-end bonus, and a 10% personal budget). You can choose to have this amount paid out whenever you like or use it to purchase additional leave days.
• 24.5 vacation days based on full-time employment. Need more time to recharge? By using your personal budget and year-end bonus, you can purchase up to 35.5 additional leave days per year.
• Flexible and hybrid working opportunities, including a fully equipped home office setup and a net remote working allowance of €2.45 per day.
• A 70% contribution to your ABP pension plan. Enexis pays two-thirds of the premium, while you contribute one-third.
• A vitality budget of €700 gross per year, which can be used for a gym membership, hobbies, or making your home more sustainable. You can also save this budget for up to three years (up to €2,100) and use it towards study expenses or repaying student debt.
• Plenty of opportunities through our internal development platform and external education and training programmes.
• A MacBook and mobile phone, also available for personal use outside working hours.
• A mobility card for first‑class travel and a commuting allowance.
• Opportunities to attend SANS cybersecurity training courses.

A pre-employment screening is part of the recruitment process. This includes, among other things, reference checks, obtaining a Certificate of Conduct (VOG), and reviewing publicly available online sources.