What You'll Be Doing

• Own and improve endpoint security for macOS and Windows devices, implementing policies as code with the ability to roll out and roll back changes.
• Manage security settings and monitoring for critical SaaS applications using SSPM tools to prevent risky configurations.
• Lead and enhance identity access management, including SSO, phishing-resistant MFA, passkey rollout, and lifecycle automation for least-privilege access.
• Drive the company's zero-trust security initiatives, ensuring proper access controls with continuous verification.
• Develop and tune detection rules within the SIEM platform to generate actionable security alerts.
• Lead incident response efforts, including triage, containment, remediation, and documentation of security events.
• Conduct regular security assessments on corporate endpoints and prioritize risks based on business impact.
• Oversee vendor and third-party security evaluations in collaboration with procurement and legal teams.
• Collaborate with IT, Engineering, and People teams to integrate security practices smoothly.
• Create and maintain security runbooks, playbooks, and documentation to enhance team capabilities and mentor junior engineers.
• Assess the impact of AI tools on corporate security requirements and adapt strategies accordingly.

You Should Have

• 5–8 years of experience in enterprise, corporate IT, or information security engineering, with a focus on practical achievements.
• Strong expertise in endpoint security tools such as DLP (e.g., Cyberhaven, Purview) and EDR (e.g., CrowdStrike, SentinelOne).
• Hands-on experience with SIEM, including writing detection logic and managing alerts to minimize false positives.
• Experience leading or significantly contributing to security incident response.
• Familiarity with cloud platforms such as AWS, GCP, or Azure.

Nice to Have

• Knowledge of network security in cloud-first environments, including ZTNA, SASE, and DNS filtering.
• Experience with infrastructure-as-code tools like Terraform for managing security configurations.
• Understanding of SCIM, OIDC, and fine-grained authorization at scale.
• Experience working in high-growth, global technology companies.
• Scripting skills in Python, Bash, or similar languages for automation of detection, response, and operations.
• Exposure to privacy regulations such as GDPR and other relevant global laws.

Perks and Benefits

• Opportunity to contribute to a fast-growing company with global impact in a multinational environment.
• Daily catered lunches including vegetarian options, breakfast, snacks, and soft drinks available onsite.
• Commuting expenses covered for employees living outside Amsterdam.
• 25 vacation days per year based on full-time employment.
• Comprehensive collective health insurance plan fully paid by the company.
• Defined pension contribution scheme.
• Equity program allowing employees to become shareholders and share in the company's growth.
• Employee Assistance Program at no cost to employees and their household members.
• Parental leave benefits supporting employees during pregnancy, childbirth, and bonding with their new child.