Infrastructure Security Engineer

Are you passionate about technology and security, and are you living in the Netherlands? We re looking for a security specialist to join the IT operations team that manages the SRE responsibilities that keeps the Paylogic ticketing platform running smoothly for our event organizers and ticket buyers.

What we do: The Paylogic platform handles ticketing for many popular festivals in the Benelux and the rest of Europe, specializing in high performance ticket sales that attract a lot of attention. Because of this we have a strong focus on performance, reliability and security.

Akamai adoption: We ve recently started integrating Akamai CDN based security solutions like WAF, BMP, Content Protector and Account Protector. Your job will be to ensure the continued smooth operation of this integration. Because of this, existing experience with Akamai is a must.

Security focus: Next to the focus on Akamai your role will include several IT security responsibilities such as:

• Ensuring and raising awareness of (cyber) security concerns.
• Coordinating between our internal development teams working on Paylogic and the cybersecurity team of CTS Eventim headquarters.
• Handling internal infrastructural IT audits, ensuring appropriate controls are in place, and helping to facilitate audits of clients.
• Coordinating audits of code bases and pentesting of web services.
• Handling responsible disclosures from external parties.
• Automated vulnerability scans.

In addition to the above you will also be part of the decision making process on how we further improve our security posture.

Broader role: When the security workload allows you will also participate in the broader work of the IT operations team. An interest (or even passion!) in programming and/or infrastructure automation is a big plus. What to expect from this role

• A positively challenging position in an ambitious company with big plans for the future . We re expanding from the Benelux to many other European countries and we have plans for the US as well.
• You will be(come) our expert on IT security, with a team of software and SRE engineers looking to you for guidance on how best to ensure the security of the Paylogic ticketing platform.
• You ll be working in a small, tight-knit team of technology enthusiasts for whom IT is as much a job as a passion. Outside of work we like to do things like build and maintain our home automation solutions, work on our home labs , develop programming solutions to complex problems, etc.
• We offer the flexibility of hybrid working where we work from the office on some days and from home on other days, after onboarding (during onboarding it helps to sit together to get to know each other and optimize knowledge sharing).
• A positive company culture that encourages strong cohesion between colleagues, both within and between teams. It can feel like a second family once you get to know us (if you re open to that sort of thing).

• Living in the Netherlands, preferably in the north (to work from our Groningen office). We also have an Amsterdam office, so there is some flexibility with regards to the preference for Groningen, but it would complicate onboarding .
• Comfortable using headless Linux servers: Our complete ticketing platform is running on Ubuntu Linux servers and we also operate local tooling that uses Linux, so you need to be comfortable using Linux on the client and server.
• Fluent English is a must, decent control of the Dutch language is a plus but not required.
• Solid knowledge of cybersecurity fundamentals (authentication, authorization, access control, encryption, attack vectors, stakeholders, auditing, etc).
• It s important that this knowledge translates to on-premise infrastructure (hosted in a physical datacenter with control of hardware). In other words we re not looking for a cloud security specialist.
• Decent knowledge of web application security (HTTPS encryption standards, OWASP guidelines, operating security scanners, handling responsible disclosure, etc).
• Experience with Akamai CDN based security solutions like WAF, BMP, Account Protector and Content Protector. The day-to-day usage of our integration with these Akamai security solutions will be a significant part of your job.
• An interest in infrastructural automation using Python. Existing experience with Python or another high level programming language and/or infrastructural automation is a big plus but not a must.
• Strong ownership and a drive to move things forward. You will become the go-to person in our team and organization for security related matters, and we re looking for someone with an intrinsic motivation to improve the status quo.
• Good communication skills are needed to deliberate between stakeholders and encourage and cultivate cybersecurity awareness in the team and organization.

Paylogic is part of EVENTIM, Europe’s largest ticketing and live entertainment company, ranking as the world’s number two provider. The client list runs from Tomorrowland and Andr Rieu to Comic Con and Zoute Grand Prix. The engineering challenges are as varied as the events.

The Operational IT team is small enough that people notice your work, but big enough that you are not doing everything by yourself.