Experienced Cyber Threat Intelligence (CTI) Specialist

What we expect from you

• You possess HBO (higher professional education) working and thinking level, focused on Cyber Security and Ethical Hacking.
• You have at least 5 years of work experience in the field of Cyber Threat Intelligence.
• You possess the certifications GIAC GCTI (SANS FOR578), GCIH, and GCDA.
• You have knowledge of well-known frameworks such as Mitre.
• You have strong communication skills. You are capable of giving presentations and are clear in oral and written communication.

• Excellent command of the Dutch language, both oral and written, at a minimum of C1 level is a requirement.

• The competencies we are looking for in this role are:
  Customer orientation; You can easily put yourself in the customer's shoes. You maintain a dialogue with the customer and are clear about mutual (realistic) expectations and the current state of affairs. You understand that you represent the Port Authority and behave accordingly.
• Influencing: You are able to summarize the messages of others well. You adapt your story and argumentation to the level and interest of your interlocutor. You are enthusiastic and use engaging examples and arguments. Additionally, you are alert to the reactions and emotions of others during conversations.
• Result orientation: You take the lead to prevent the recurrence of problems. You see and exploit opportunities to achieve goals earlier or in a better way. In doing so, you find the right balance between quality and efficiency, so that the results are optimal.
• Problem-solving ability: You are analytically strong and quickly get to the core of complex problems. You critically consider various alternatives and choose the most suitable solution that is optimal for the situation. Additionally, you recognize valuable ideas from others and integrate them effectively into your own approach, thereby contributing to innovative and effective solutions.

Great colleagues: With us, you don't just work with colleagues, but you also enjoy (if you wish) a vibrant social life outside of working hours thanks to our diverse and active employee networks.
Attractive, independent position: Own initiative is encouraged and your impact is immediately noticeable. This is your chance to make a legendary contribution to the largest port in Europe.
Flexible work week: Enjoy a 36-hour hybrid work week where we encourage a good work-life balance.
Training and development opportunities: An extensive choice of training and courses to further develop yourself.
Vitality and well-being: Discount on your gym membership and fresh fruit at the workplace. A workplace that has an eye for your needs - with attention to health, well-being, and accessibility.
Competitive salary: Depending on your education and experience, we offer a starting salary of max. € 6,063.- gross per month based on a 36-hour work week, with growth opportunities up to € 7,579.- gross per month.
Travel allowance: Whether you travel by car, bicycle, or (first class) public transport, we provide an appropriate allowance.
Flexible reward budget: 19.6% on top of your gross monthly salary, consisting of holiday allowance (8%), thirteenth month (8.33%), vitality contribution (2.3%), and an extra budget (0.97%). You can choose to have this budget paid out periodically or use it for, for example, a bicycle, extra pension contributions, extra leave hours, additional training costs, or a sustainable investment.
Prospect of permanent employment: if we are mutually satisfied, you will receive a permanent contract after the first year.
Excellent pension scheme: With ABP (career-average scheme), where we cover about 70% of the premium. Secure a legendary future.
Company laptop and mobile phone: Always have the right tools at hand to perform your work optimally.

Digital attacks pose a growing threat to the nautical and logistical processes in Dutch seaports. To proactively tackle cyber threats, the Seaports Industry Organization (BOZ), the Ministry of I&W, and the NCTV have jointly established an approach: the Cyber Strategy for Dutch Seaports.

This has resulted in Ferm Seaports, a partnership for seaports of national importance.

Ferm Seaports is the knowledge center for cyber security and resilience in the Dutch seaports.
Working within Ferm Seaports offers the opportunity to be part of a highly qualified team that improves the digital resilience of the seaports.

Digital attacks pose a growing threat to the nautical and logistical processes in Dutch seaports.

To proactively tackle cyber threats, a joint approach has been developed and established in the Cyber Strategy for Dutch Seaports. This strategy is implemented by Ferm Seaports, a non-profit partnership for seaports of national importance. The goal of Ferm is to increase the digital resilience and robustness of the five seaports of national importance: Groningen Seaports, North Sea Port (Vlissingen, Gent, and Terneuzen), Port of Rotterdam, Port of Moerdijk, and Port of Amsterdam.

Ferm Seaports has 3 core tasks: Connector, Controller, and Representative.

Do you see patterns where others only see noise? Do you get energy from analyzing complex threat data from both open and closed sources? And do you know better than anyone how to think like a hacker, but communicate like an advisor? Then we are looking for you.
As a Cyber Threat Intelligence (CTI) Specialist at Ferm Seaports, you will dive daily into the world of cyber threats, geopolitical developments, and data-driven insights. You know how to turn fragmented information into a clear threat picture and translate this into concrete advice that organizations in the Dutch seaports can truly act upon.
What will you do?
As a CTI specialist, you are the link between technology and organization. You extract valuable insights from complex data and translate these into clear, usable threat information for organizations in the Dutch seaports.
Your activities will include:
• Helping to build a Threat Intelligence Platform (TIP) through which CTI can be exchanged between relevant stakeholders in the seaports
• Analyzing open and closed sources to make geopolitical and cyber threats transparent
• Establishing connections between threat information and organizations in the Dutch seaports
• Drafting threat reports at operational, tactical, and strategic levels
• Translating technical information into understandable and usable insights for various target groups
• Collaborating intensively with stakeholders throughout the entire organization
Your responsibilities
• Drafting and communicating threat pictures that provide direction for security measures for organizations in the Dutch seaports
• Conducting CTI investigations and identifying new IOCs and TTPs
• Analyzing and interpreting malicious activities and plotting them on frameworks such as MITRE ATT&CK
• Translating analyses into operational, tactical, and strategic reports
• Selecting, building, and managing data within the Threat Intelligence Platform (TIP)
• Contributing to the further development of OSINT, Forensics, and Incident Response
In this role, you will be given the space to make a real impact. Your analyses form the basis for decisions that strengthen the digital security of the Dutch seaports. You will work at the intersection of intelligence, technology, and strategy, exactly where your expertise makes the difference.