Incident Detection and Response: Utilise our security controls and SIEM to detect and respond to security incidents, including malware, data breaches, and other cyber threats;

Evaluate and investigate potential security incidents reported by internal customers, prioritising and responding based on severity and risk;

Incident Investigation: Conduct in-depth investigations of security incidents, performing root cause analysis and providing recommendations for remediation;

Threat Intelligence: Stay up-to-date with the latest threat intelligence, understanding emerging threats and vulnerabilities to improve detection and response strategies;

Security Operations: Work closely with Level 1 and Level 2 analysts to improve escalation support;

Security Tools Management: work with security tools, including SIEM, EDR, Zero trust network controls, IDS/IPS, and vulnerability management;

Documentation: Maintain detailed incident reports and documentation for compliance and reporting purposes;

Collaboration: Collaborate with other squads within the organisation, sharing insights and recommendations and participating in security initiatives;

Participate in a 24/7 on call rotation scheme.

Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent experience);

A minimum of 3-5 years of experience in a security-related role;

Strong understanding of security principles, concepts, and technologies;

Good understanding of MITRE ATT&CK framework or Capec;

Proficiency in using SIEM tools, intrusion detection systems, and other security technologies;

Relevant certifications such as CISSP, Comptia Security+ or equivalent are a plus;

A good understanding of Public Cloud (AWS) security or willingness to learn. We actively support AWS training and certification;

Strong analytical and problem-solving skills, with the ability to think critically and act decisively in high-pressure situations;

Excellent communication skills in Dutch, with the ability to convey complex technical information to both technical and non-technical stakeholders;

A passion for cybersecurity and a commitment to continuous learning in the field;

Continuous deployment and automated testing are some of our core beliefs and we’ve moved to the cloud (AWS) with no intention of turning back. We also strongly believe in autonomous and self-managing teams, so you get a lot of say in how you want to work or what you want to improve.

You will be working at a leading media company bustling with fun colleagues. Like you, they are passionate about digital and offline media and are continuously learning new things from each other and from the best in the trade. You are set out on a journey where every next week will be different from the last, and where you are stimulated on a daily basis to take things to the next level.

You get the opportunity to keep reinventing yourself in an environment where continuous learning is the benchmark. All of this through trainings (internal and external), guild meetings, online courses, experiments,... You decide where the journey takes you, with maximum support from us.