Cyber Security Engineer

Summary Description:

Senior Security Engineer responsible for securing customer-specific Digital Sovereign Private Cloud (DSPC) environments across their full lifecycle. The role focuses on embedding security-by-design in OpenShift-based DevSecOps platforms, translating regulatory and compliance requirements into automated security controls, and ensuring continuous compliance and audit readiness in highly regulated environments.

Role Type: Contract

Location/Language:

Netherlands & Belgium

Languages: English & Dutch (fluent required)

Requirements Description:

• 5–8+ years in cloud/platform security roles
• Strong IT security background in regulated environments
• Comfortable in customer-facing, high-compliance environments
• Willingness to undergo background screening (BO+)
• Relevant security certifications are a plus

Tasks Description:

• Design and implement security architecture, hardening, and zero-trust controls for OpenShift environments
• Define and enforce security and compliance policies across clusters and pipelines
• Own audit preparation, evidence collection, and compliance traceability
• Translate regulatory requirements into policy-as-code and automated controls
• Operate vulnerability scanning, policy enforcement, and compliance automation
• Manage IAM, RBAC, secrets, encryption, and logging
• Monitor security posture with SREs and engineers
• Support risk analysis and incident response
• Act as primary security escalation point
• Advise customers on best practices and mitigations
• Align security with architecture and delivery constraints

Essential Skills/Experience Description:

• Hands-on Kubernetes/OpenShift security in production
• Security hardening and monitoring in cloud-native environments
• Security automation & policy-as-code
• Audit and compliance support experience
• Identity, encryption, secrets, and logging knowledge
• Strong analytical and risk assessment skills
• Clear communication on security trade-offs
• DevSecOps mindset and teamwork

Desirable Skills/Additional Information Description:

• Experience in sovereign/regulated sectors (government, defense, justice)
• Knowledge of GDPR, NIS2, BIO2, EUCS, ISO 27001/17/18
• CI/CD security integration (SAST, DAST, SCA)
• Pragmatic approach balancing security and delivery
• Secure-by-design collaboration with architects and platform teams
• Professional growth opportunities in sovereign cloud security

Team Contact:

[email protected]