About the role
<p class="mt-2 mb-1 text-gray-900 first:mt-0 last:mb-0 dark:text-gray-100" style="text-align:start;">Are you someone who identifies security risks before they become real problems? And do you enjoy translating security principles into practical technical controls that work in complex IT environments? Then read on.</p><p class="mt-2 mb-1 text-gray-900 first:mt-0 last:mb-0 dark:text-gray-100" style="text-align:start;"><strong>What will you do as Infrastructure Security Specialist<br></strong>As an Infrastructure Security Specialist, you ensure that technical security controls within our IT environment are properly designed and effectively implemented. You combine security engineering with a structured governance mindset and translate security principles into concrete technical configurations. In doing so, you strengthen the reliability of our technical control framework and contribute directly to a secure and sustainable IT landscape. Without this role, the connection between security policy and technical implementation weakens, which can reduce the effectiveness of our security controls.</p><p class="mt-2 mb-1 text-gray-900 first:mt-0 last:mb-0 dark:text-gray-100" style="text-align:start;"><strong>Concretely, you will work on:<br>D</strong>efining and maintaining technical security standards and by working closely with engineers and IT teams to structurally improve security. In addition, you will focus on:</p><ul class="mt-0 mb-4 ml-2 list-disc pl-6 text-gray-900 last:mb-0 dark:text-gray-100 [&>li]:mb-1 [&>li::marker]:text-base [&>li::marker]:text-gray-900 dark:[&>li::marker]:text-gray-100"><li><p>Defining and maintaining security baselines for Microsoft 365, Azure, endpoints, infrastructure and network components</p></li><li><p>Translating security principles into practical configuration standards and reviewing new technologies and projects from a security architecture perspective</p></li><li><p>Supporting secure software development practices and DevSecOps integration, including secure coding, dependency scanning and CI/CD security controls</p></li><li><p>Performing technical control reviews such as RBAC, encryption, segmentation and system hardening</p></li><li><p>Supporting vulnerability management and ensuring that security requirements are embedded in change and project processes</p></li></ul><p class="mt-2 mb-1 text-gray-900 first:mt-0 last:mb-0 dark:text-gray-100" style="text-align:start;"><strong>Team<br></strong>You will not do this alone, but together with a group of engaged and motivated colleagues. In this role, you report to the Information Security Officer (ISO) and work closely with Security Engineers and various IT teams. You operate at the intersection of technical specialists and governance stakeholders and ensure that security controls are not only defined, but also technically sound and properly implemented. The role combines operational involvement with structural improvements to the security framework.</p><p><strong>What we offer</strong></p><ul class="mt-0 mb-4 ml-2 list-disc pl-6 text-gray-900 last:mb-0 dark:text-gray-100 [&>li]:mb-1 [&>li::marker]:text-base [&>li::marker]:text-gray-900 dark:[&>li::marker]:text-gray-100"><li><p>A salary of up to €6.200 gross per month based on 40 hours, including holiday allowance and an annual bonus</p></li><li><p>30 vacation days and a premium‑free pension</p></li><li><p>Travel allowance and a home‑working and internet allowance</p></li><li><p>The possibility to work 50% from home</p></li><li><p>Work from the sun during winter? Take a few weeks on a workation</p></li><li><p>Plenty of opportunities to grow and develop through our broad learning and development offering</p></li><li><p>Fun events, drinks and sports activities</p></li><li><p>A healthy and extensive lunch every day</p></li><li><p>A comfortable office with free parking and Hilversum station within walking distance</p></li><li><p>And of course a company full of enthusiastic colleagues</p></li></ul><p class="mt-2 mb-1 text-gray-900 first:mt-0 last:mb-0 dark:text-gray-100"><strong>What we are looking for<br></strong>For this role, we are looking for a technically skilled security professional who can translate risk and policy requirements into concrete technical controls. You work in a structured way, are detail‑oriented and feel comfortable challenging technical designs from a security perspective.</p><ul class="mt-0 mb-4 ml-2 list-disc pl-6 text-gray-900 last:mb-0 dark:text-gray-100 [&>li]:mb-1 [&>li::marker]:text-base [&>li::marker]:text-gray-900 dark:[&>li::marker]:text-gray-100"><li><p>3–6 years of experience in IT security</p></li><li><p>Practical experience with Azure DevOps security configurations and application security controls</p></li><li><p>Experience with Software Composition Analysis tools, SAST, DAST and web and mobile penetration testing</p></li><li><p>Understanding of cloud and network security fundamentals, with a strong focus on Azure</p></li><li><p>Experience reviewing