Security engineer in GovTech

Xxllnc; Amsterdam; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid work model

Laptop

Phone stipend

Home-office allowance

Team events

Job summary

Xxllnc в Амстердаме ищет старшего инженера по кибербезопасности для обеспечения безопасности облачных сервисов и GovTech приложений. Вы будете работать с международной командой, отвечать за 20+ проектов и внедрять практики secure-by-default.

Основные задачи включают усиление AWS/Kubernetes безопасности, настройку IAM/RBAC, управление уязвимостями, SIEM и интеграцию в CI/CD. Гибридный формат работы, конкурентное вознаграждение и возможности роста в xxllnc Academy.

Qualifications

• Опыт работы инженером по безопасности в облаке (AWS) и Kubernetes.
• Управление уязвимостями, IAM и RBAC на продвинутом уровне.
• Наличие сертификатов по безопасности приветствуется; знание голландского желателено.

Responsibilities

• Улучшение и аудит безопасности Cloud и Kubernetes окружений.
• Проектирование архитектуры по принципу secure-by-default и участие в Architecture Board.
• Определение и внедрение guardrails в CI/CD и критических системах.
• Сотрудничество с Security командой для самобслуживания инструментов и повышения уровня безопасности.
• Настройка и оптимизация SIEM, обнаружение и автоматическое remediation уязвимостей.
• Определение IAM/RBAC политик и обеспечение их применения.
• Работа с разработчиками и инженерами для постоянного повышения стандартов безопасности.

Skills

AWS security

Kubernetes security

Vulnerability management

IAM & RBAC

Security metrics

SIEM configuration

CI/CD security

Tools

SIEM

CI/CD pipelines

Cloud security tooling

Job description

Описание

As a Senior Security Engineer, you will ensure our cloud infrastructure and GovTech applications are secure by design and in operation. This is a broad, impactful security role. Collaborating with an international team of Cloud and Software Engineers, you will help secure 20+ applications. You will operate with minimal bureaucracy while tackling the complex technical challenges of an integrating tech organization.

Задачи

• Enhance and assess the security of our Cloud and Kubernetes environments.
• Design secure-by-default architecture and actively represent Security on the Architecture Board.
• Define secure-by-default guardrails within our CI/CD pipelines and core systems.
• Partner with the Security team to deliver self-service tooling, empowering 20+ development teams to build securely and take ownership of their application security.
• Configure and optimize centralized tooling to detect, report, and automatically remediate vulnerabilities across our core infrastructure.
• Design, manage, and mature our SIEM landscape.
• Defining and enforcing IAM frameworks and RBAC policies.
• Work pragmatically with developers, cloud engineers, and compliance teams to continuously elevate our security standards.
• Participate in security risk assessments and help technical leadership interpret complex vulnerabilities.

Требования

We are looking for an experienced, pro-active Security Engineer who enjoys working across multiple security domains. Taking ownership of technical security initiatives comes naturally to you. You pair a strong technical foundation with the ability to independently plan, prioritize, and deliver results aligned with business objectives.

AWS and Kubernetes security Application and cloud security Vulnerability management Identity & Access Management (IAM) Workstation & Endpoint security Security event metrics, alerting, and SIEM configuration CI/CD pipeline security

Submitting a Certificate of Good Conduct (VOG) is required as part of our onboarding process.

Будет плюсом: Software development or scripting experience; Security or cloud certifications (e.g., AWS Certified Security - Specialty, CKS, or equivalent); Proficiency in Dutch (spoken and written)

Условия

A close-knit, enthusiastic team of professionals who actively support one another. High autonomy and ownership: flexibility in how you manage your work, backed by supportive leadership. Hybrid work model: freedom to work remotely, combined with set office days for collaboration and team events. Continuous growth opportunities through the xxllnc Academy for personal and professional development. A competitive compensation package including salary, mobility allowance, laptop, phone stipend, and home-office allowance. Engaging team events and social activities.