Cyber Security Operations Engineer

• HBO or WO working and thinking level, preferably within IT, cybersecurity, computer science, or a related field.
• Relevant experience, at least 5 years, with security engineering, security operations, and/or the management of security platforms.
• Knowledge and experience of security technologies such as SIEM, XDR, EDR, monitoring solutions, or cloud security.
• Insight into detection, incident response, and management processes and experience with improving security measures.
• Good communication skills and the ability to collaborate effectively with diverse stakeholders.
• Excellent command of the Dutch language, in speech and writing (C1 level)

At Port of Rotterdam, you will work in a complex and socially relevant environment that is in motion 24/7. With your technical security expertise, you will contribute directly to the continuity and safety of vital digital processes.

Within our security organization, you will work on the technical foundation of security monitoring and response. You will help design, manage, and improve security solutions, collaborate with internal teams and vendors, and contribute to strengthening detection, automation, and incident follow-up.

As a Cyber Security Operations Engineer, you will design, manage, and improve security tools within the central security platform of the Port of Rotterdam. You will work according to a DevOps methodology, where management and development work closely together and insights from monitoring, incidents, and operations are used to continuously further develop the platform.

Your responsibilities include, among other things:

• Designing and implementing new security solutions and improvements within the security platform.
• Further developing capabilities in the areas of detection, response, automation, and monitoring.
• Managing and optimizing security tooling and platform components.
• Improving existing solutions such as XDR, EDR, NDR/NIDS, SIEM, and SOAR functionality.
• Contributing to use-case management, detection rules, response processes, and automation.
• Supporting the follow-up of security incidents and participating in the on-call service.
• Initiating and guiding improvement processes within multidisciplinary teams.
• Collaborating with IT teams, architects, asset owners, and external vendors.
• Recording documentation, management agreements, and improvement proposals.

With your work, you help to signal digital threats faster, investigate them better, and follow up more effectively.

Work environment: A professional and socially relevant work environment.

Collaboration: You will work together with engaged, experienced, and expert colleagues. Additionally, there are opportunities to participate in employee networks and other activities within the organization.

Independent role: A role with room for your own initiative, responsibility, and visible results. You will make a direct contribution to the development of Europe's largest port.

Flexible work week: A 36-hour work week, with attention to a healthy work-life balance.

Development: Extensive opportunities to further develop yourself through training, education, and projects. The opportunity to help build the further development of cybersecurity within the Port of Rotterdam.

Vitality: Discount on sports facilities.

Salary: Depending on knowledge and experience, a salary up to € 6,063 gross per month (36 hours), with growth opportunities up to € 7,579 gross per month.

Travel allowance: An appropriate allowance for traveling by car, bicycle, or public transport.

Flexible choice budget: 19.6% on top of your monthly salary, composed of holiday allowance (8%), thirteenth month (8.33%), vitality contribution (2.3%), and an extra budget (0.97%). Freely deployable for, for example, extra leave, pension accrual, sustainable investments, or training.

Employment: You will start with a one-year contract.

Pension scheme: Participation in the ABP pension fund, in which we pay 70% of the premium.

For more information about our employment conditions, you can refer to our CAO.

You will become part of a team focused on strengthening the digital resilience of the Port of Rotterdam. The team works on security monitoring, incident response, vulnerability management, threat intelligence, and the technical facilities required for that.

We work closely with colleagues from IT, architecture, operations, and with external partners. In doing so, we maintain control over quality, governance, manageability, and the further development of the security platform.

Customer orientation: You can empathize well with the customer. You remain in dialogue with the customer and are clear about mutual (realistic) expectations and the state of affairs. You understand that you represent the Port Authority and behave accordingly.

Influencing: You are able to summarize the messages of others well. You adapt your story and argumentation to the level and interest of your interlocutor. You are enthusiastic and use engaging examples and arguments. Additionally, you are alert to the reactions and emotions of others during conversations.

Result orientation: You take the lead to prevent the repetition of problems. You see and exploit opportunities to achieve goals earlier or in a better way. In doing so, you find the right balance between quality and efficiency, so that the results are optimal.

Problem-solving ability: You are analytically strong and quickly get to the core of complex problems. You critically consider various alternatives and choose the most suitable solution that is optimal for the situation. Additionally, you recognize valuable ideas from others and integrate them effectively into your own approach, thereby contributing to innovative and effective solutions.

Instead of a motivation letter, we ask you to answer the three questions below. We would like to receive your answers in your own words, so that we get a good impression of your experience, motivation, and way of working.

• Answer each question in a maximum of 250 words.
• Use examples from your own experience.
• Do not share confidential information from current or former employers. Take into account any confidentiality, safety, or security agreements that apply to you.
• We assess the content of your answers. An extensive motivation letter is not necessary.

1. What experience do you have with security operations, security engineering, and/or the further development of security platforms?

Describe a relevant example from your work experience. Explain what your role was, which technologies or processes you worked with, and what you contributed.

2. Can you give an example of a technical improvement that you realized within a security, monitoring, or IT environment and what was your role in this?

Describe the challenge, your approach, the collaboration with involved colleagues or partners, and the result.

Explain which aspects of the position appeal to you and how your knowledge, experience, and ambitions align with them. Additionally, indicate how you view the role of future security operations.

Are you doubting if this position suits you or do you want to know more first? Feel free to contact Martin via recruitment@portofrotterdam.com. We are happy to think along with you and answer your questions about the role, the work environment, and the possibilities within our organization.