Your energy makes a difference
Your mission is to work together with the team to identify and map our attack surface.
Would you like to use your expertise to secure the digital backbone of the Dutch energy grid? Enexis is at the heart of the energy transition, operating in a unique landscape where corporate IT and industrial Operational Technology (OT) come together. To protect our critical infrastructure, we are building a Cyber Attack Surface Management (CASM) team. We are looking for several security professionals to help us gain and maintain a clear overview of our attack surface and manage the associated risks.
We have opportunities for both IT security professionals and OT security professionals. Experience in both domains is not required. What matters most is that you have a solid foundation in one of these areas and the motivation to further develop your expertise.
This is how you take on the challenge
Your mission is to work with the team to map and analyze our attack surface and help reduce it. You contribute to our proactive security approach by identifying a wide range of technical findings, such as vulnerabilities and misconfigurations in our technical IT infrastructure. You analyze these findings based on risk and within the context of Enexis, and actively advise teams on appropriate solutions. In doing so, you help make our organization more resilient every day.
You preferably have experience in the following areas:
Vulnerability scanning & analysis
- Analyzing and triaging scan results and enriching vulnerability information with context and threat intelligence, for example using CVSS and EPSS.
- Validating fixes and advising operations and management teams on the most effective remediation and mitigation measures.
Asset discovery
- Configuring and managing asset discovery tools to gain visibility into endpoints, servers, network devices and cloud resources.
- Analyzing discovery data to identify shadow IT and reconciling findings with the CMDB.
Data analysis & scripting
- Analyzing and correlating data from different security sources, such as scanners, the CMDB and threat feeds, to create an integrated view of risk.
- Building and maintaining dashboards, for example in Power BI, Splunk or ServiceNow, for operational and tactical reporting.
This is how you approach it
You are a security professional who is energized by technical analysis and by collaborating with others to reduce risk. You bring:
- 3–5 years of relevant professional experience
- Knowledge of vulnerabilities within IT environments: You have knowledge of IT security areas such as networks, cloud and operating systems, and you understand the nature of common vulnerabilities and how they can be exploited.
- Affinity with security tooling: You are hands-on and understand the purpose and use of tools such as vulnerability scanners. You are familiar with scripting, for example Python, to analyze data.
- Strengthening & improving: You continuously help develop and mature our CASM capability, with a strong focus on the technical side. You ensure that tooling is effectively configured and deployed, providing an increasingly complete and reliable view of our attack surface. You improve asset discovery, scanning, classification and data quality, integrate CASM tooling with other security and IT systems, and translate technical data into actionable risk insights and remediation actions. You actively identify opportunities to further automate processes, integrations and security analysis.
This role focuses on two or three of the following areas:
- Technical assessments: You contribute to technical assessments across our IT landscape. You help analyze the results and identify potential risks.
- Translating vulnerabilities into risks & providing advice: You help translate technical vulnerabilities into tangible risks and advise the business and resolution teams on possible solutions.
- Collaboration & coordination: You work closely with the central CASM team currently being established, the SOC and decentralized operations teams across both the IT and OT domains.
- Strengthening & improving: You contribute ideas and expertise to continuously improve our CASM processes, tooling and reporting.
You join forces with...
The CASM team and a broad network of colleagues across Enexis. You will work closely with the IT SOC, OT SOC and various engineering teams.
Monday is our regular collaboration day in Weert. Arrangements for the other working days are made in consultation with the team. We offer flexibility in where you work. Depending on your activities and in coordination with your manager, working from home is possible.
We work in a diverse and inclusive environment in which you are expected to be proficient in both Dutch and English.
It is important to us that you feel at home at Enexis. We are all different, and those differences allow us to complement one another. We need diverse perspectives and opinions to make the energy transition a success. Read more about our policy on diversity and inclusion here.
And of course, we invest our energy in you too
At Enexis, you'll be working at the forefront of one of the greatest challenges of our time: the energy transition. We believe in taking good care of our people, starting with a comprehensive onboarding package and introduction programme to help you get to know your colleagues. We also offer an attractive employment package, including:
- A gross monthly salary between €4,953 and €7,076 (based on a 40-hour work week).
- An additional 28.7% on top of your salary (8% holiday allowance, a 10.7% year-end bonus, and a 10% personal budget). You can choose to have this amount paid out whenever you like or use it to purchase additional leave days.
- 24.5 vacation days based on full-time employment. Need more time to recharge? By using your personal budget and year-end bonus, you can purchase up to 35.5 additional leave days per year.
- Flexible and hybrid working opportunities, including a fully equipped home office setup and a net remote working allowance of €2.45 per day.
- A 70% contribution to your ABP pension plan. Enexis pays two-thirds of the premium, while you contribute one-third.
- A vitality budget of €700 gross per year, which can be used for a gym membership, hobbies, or making your home more sustainable. You can also save this budget for up to three years (up to €2,100) and use it towards study expenses or repaying student debt.
- Plenty of opportunities for growth through our internal development platform and external education and training programmes. Whether you are aiming for the next step in your career, considering a new direction, or looking to further develop your skills, we encourage you to reach your full potential.
- A MacBook and mobile phone, also available for personal use outside working hours.
- A mobility card for first-class travel and a commuting allowance.
- Opportunities to attend SANS cybersecurity training courses.
Read more about our employment benefits.
Shape the energy network of tomorrow as a Cyber Defense Specialist
Apply via the button at the bottom of this page.
Do you have any questions about the position? Please contact Marvin Kerdel, Corporate Recruiter IT, at marvin.kerdel@enexis.nl.
Good to know
After submitting your application, you will receive an email with more information about the recruitment process. Typically, this consists of two interviews: an initial (online) interview with the hiring manager, followed by a second interview with your future colleagues on-site.
A pre-employment screening is part of the recruitment process. This includes, among other things, reference checks, obtaining a Certificate of Conduct (VOG), and reviewing publicly available online sources. You will receive more information about the screening process during your application journey.
Sollicitatieproces
-
1
Sollicitatie ontvangen
Je ontvangt binnen 5 werkdagen een reactie van ons, tenzij in de vacaturetekst expliciet een andere reactietermijn is vermeld.
-
2
Kennismakingsgesprek
Tijd om elkaar te leren kennen. Wie ben je? Wat doe je graag? Waarom deze functie? En niet onbelangrijk: Wat wil jij weten van ons?
-
3
Vervolggesprek
We horen graag over je werkervaringen en waarom de functie op je lijf geschreven staat. Daarnaast zullen we ook dieper ingaan op de inhoud van de functie.
-
4
Arbeidsvoorwaardengesprek
Is er een wederzijdse match? Dan doen we je graag een aanbod bestaande uit een passend salaris en onze arbeidsvoorwaarden.
-
5
Een warm welkom!
Het sollicitatieproces zit erop. Je hoeft alleen nog maar je handtekening te zetten en dan start jouw avontuur bij Enexis. Tot snel, collega!
