Security engineer in GovTech

As a Senior Security Engineer, you will ensure our cloud infrastructure and GovTech applications are secure by design and in operation. This is a broad, impactful security role. Collaborating with an international team of Cloud and Software Engineers, you will help secure 20+ applications. You will operate with minimal bureaucracy while tackling the complex technical challenges of an integrating tech organization.

• Enhance and assess the security of our Cloud and Kubernetes environments.
• Design secure-by-default architecture and actively represent Security on the Architecture Board.
• Define secure-by-default guardrails within our CI/CD pipelines and core systems.
• Partner with the Security team to deliver self-service tooling, empowering 20+ development teams to build securely and take ownership of their application security.
• Configure and optimize centralized tooling to detect, report, and automatically remediate vulnerabilities across our core infrastructure.
• Design, manage, and mature our SIEM landscape.
• Defining and enforcing IAM frameworks and RBAC policies.
• Work pragmatically with developers, cloud engineers, and compliance teams to continuously elevate our security standards.
• Participate in security risk assessments and help technical leadership interpret complex vulnerabilities.

• We are looking for an experienced, pro-active Security Engineer who enjoys working across multiple security domains.
• Taking ownership of technical security initiatives comes naturally to you.
• You pair a strong technical foundation with the ability to independently plan, prioritize, and deliver results aligned with business objectives.
• AWS and Kubernetes security
• Application and cloud security
• Vulnerability management
• Identity & Access Management (IAM)
• Workstation & Endpoint security
• Security event metrics, alerting, and SIEM configuration
• CI/CD pipeline security
• Submitting a Certificate of Good Conduct (VOG) is required as part of our onboarding process.
• Будет плюсом: Software development or scripting experience; Security or cloud certifications (e.g., AWS Certified Security – Specialty, CKS, or equivalent); Proficiency in Dutch (spoken and written)

• A close-knit, enthusiastic team of professionals who actively support one another.
• High autonomy and ownership: flexibility in how you manage your work, backed by supportive leadership.
• Hybrid work model: freedom to work remotely, combined with set office days for collaboration and team events.
• Continuous growth opportunities through the xxllnc Academy for personal and professional development.
• A competitive compensation package including salary, mobility allowance, laptop, phone stipend, and home-office allowance.
• Engaging team events and social activities.