Junior Security Consultant

The assignment strengthens an ICT Security Team within a police organisation. The wider ICT department covers management and administration, security, support and infrastructure, business applications and operational technical support. The position is classified as Junior and calls for practical security experience alongside strong foundational knowledge of infrastructure, endpoint, network and information security. The selected consultant will work with the existing Security Team.

Responsibilities:

- Support the Security Team in analysing and responding to security incidents, including log investigation, incident triage and relevant threat intelligence.

- Contribute to information security within infrastructure, application and data environments, drawing on relevant specialist expertise.

- Assist with the analysis, optimisation and documentation of security processes and governance.

- Apply knowledge of Active Directory, EDR, firewalls, Windows security and networking fundamentals when investigating security issues.

- Support information-security activities and the application of relevant controls or security frameworks where appropriate.

Must Have:

- Experience as a Security Consultant in data, infrastructure, application or similar security environments [1 year · Junior]

- Experience in log analysis and incident response [1 year · Junior]

- Experience in security incident triage and threat intelligence [1 year · Junior]

- Knowledge of analysing, optimising and documenting security processes and governance [Required]

- Knowledge of Active Directory, including ADUC, DNS, DHCP and Group Policy Objects [Required]

- Knowledge of Endpoint Detection and Response (EDR) [Required]

- Knowledge of firewalls and firewall/log analysis [Required]

- Knowledge of TCP/IP and networking fundamentals, including VLANs and troubleshooting [Required]

- Knowledge of Windows security (server and client) [Required]

- Knowledge of information security [Required]

- Dutch language proficiency at CEFR C2 [Required]

Should Have:

- Experience with security management techniques and frameworks, such as ISO 27000 series, COBIT for Security, NIST, OWASP and CIS Critical Security Controls [Preferred]

- Relevant security certifications or certified knowledge, such as CISM, CISSP or CEH [Preferred]

- Knowledge of Elastic or another SIEM platform [Preferred]

- Knowledge of Microsoft 365 security [Preferred]

- Knowledge of PowerShell [Preferred]

- Knowledge of vulnerability management [Preferred]

- Experience in a Security Operations Centre (SOC) [3 years · Medior]

Nice to Have:

- Knowledge of CIS Benchmarks [Preferred]