Infrastructure Security Specialist
Role details
Job location
Tech stack
Job description
As an Infrastructure Security Specialist, you ensure that technical security controls within our IT environment are properly designed and effectively implemented. You combine security engineering with a structured governance mindset and translate security principles into concrete technical configurations. In doing so, you strengthen the reliability of our technical control framework and contribute directly to a secure and sustainable IT landscape. Without this role, the connection between security policy and technical implementation weakens, which can reduce the effectiveness of our security controls.
Concretely, you will work on:
Defining and maintaining technical security standards and by working closely with engineers and IT teams to structurally improve security. In addition, you will focus on:
- Defining and maintaining security baselines for Microsoft 365, Azure, endpoints, infrastructure and network components
- Translating security principles into practical configuration standards and reviewing new technologies and projects from a security architecture perspective
- Supporting secure software development practices and DevSecOps integration, including secure coding, dependency scanning and CI/CD security controls
- Performing technical control reviews such as RBAC, encryption, segmentation and system hardening
- Supporting vulnerability management and ensuring that security requirements are embedded in change and project processes
Team
You will not do this alone, but together with a group of engaged and motivated colleagues. In this role, you report to the Information Security Officer (ISO) and work closely with Security Engineers and various IT teams. You operate at the intersection of technical specialists and governance stakeholders and ensure that security controls are not only defined, but also technically sound and properly implemented. The role combines operational involvement with structural improvements to the security framework.
Requirements
For this role, we are looking for a technically skilled security professional who can translate risk and policy requirements into concrete technical controls. You work in a structured way, are detail-oriented and feel comfortable challenging technical designs from a security perspective.
- 3-6 years of experience in IT security
- Practical experience with Azure DevOps security configurations and application security controls
- Experience with Software Composition Analysis tools, SAST, DAST and web and mobile penetration testing
- Understanding of cloud and network security fundamentals, with a strong focus on Azure
- Experience reviewing and validating technical security configurations and security baselines
Experience with DevSecOps practices such as CI/CD security, dependency scanning and secure coding integration is considered a plus. The same applies to experience with threat modeling, secure design reviews at application level, or awareness of AI/ML security risks and governance considerations.
Benefits & conditions
- A salary of up to €6.200 gross per month based on 40 hours, including holiday allowance and an annual bonus
- 30 vacation days and a premium-free pension
- Travel allowance and a home-working and internet allowance
- The possibility to work 50% from home
- Work from the sun during winter? Take a few weeks on a workation
- Plenty of opportunities to grow and develop through our broad learning and development offering
- Fun events, drinks and sports activities
- A healthy and extensive lunch every day
- A comfortable office with free parking and Hilversum station within walking distance
- And of course a company full of enthusiastic colleagues
What we are looking for