Senior Security Engineer

We are looking for a Senior Security Engineer to help secure a large container platform and support developers in delivering secure applications. You will represent security in a multidisciplinary container operations team, with support from security specialists and access to further training.

Your role

• Secure the container platform and help developers apply security practices to their applications.
• Take a leading role in container security and advise the team on security best practices.
• Assess threats using STRIDE and help manage vulnerabilities in container images.
• Integrate security into development pipelines and work with cloud-native security tooling.
• Explain security measures to colleagues and collaborate with internal and external partners.

You have

• At least five years of experience as a Security Consultant in data, infrastructure or applications.
• Experience analysing, improving and documenting security processes.
• Experience analysing, improving and documenting security governance.
• Demonstrable expertise in a specific information security domain.
• Good knowledge of current IT risks.
• Experience implementing security solutions to mitigate IT risks.
• Dutch at C2 level.

A plus

• Ability to work independently.
• Ability to work towards a shared goal in a team.
• Ability to take initiative.
• Willingness to take responsibility.
• Ability to explain and enforce security measures with a wide range of staff.
• Ability to collaborate and build a network with internal and external partners.
• Diplomatic assertiveness in a multidisciplinary team.
• Experience with CNAPP platforms, including reporting, runtime policies and compliance checks.
• Professional experience with containerisation.
• Experience with Kubernetes.
• Experience implementing container security best practices.
• Ability to coach and advise on container security best practices.
• Experience with DevSecOps.
• Experience integrating security into CI/CD pipelines.
• Experience with SAST tools in development pipelines.
• Experience with DAST tools in development pipelines.
• Experience with GitLab CI.
• Experience detecting and managing vulnerabilities, particularly in container images, using vulnerability management solutions.
• Experience with Red Hat OpenShift, particularly version 4.
• Experience with STRIDE threat modelling.
• Experience with security management frameworks, such as ISO 27000, COBIT for Security, NIST, OWASP or CIS Controls.
• A relevant information security certification, such as CISM, CISSP or CEH.
• Experience with scripting.
• Familiarity with cloud technologies, such as AWS, Azure or GCP.
• Understanding of cloud security concerns and the advantages and disadvantages of moving to the cloud.
• A relevant cloud certification.