Are you an experienced Information Security Engineer and interested in supporting the well-being of the Internet? Do you feel as comfortable with Linux command-line tools, as with investigating security incidents? Do you have experience, or a keen interest, in Cloud security? In this role you get the chance to work with the latest state of the art technology and you’ll work on projects that really make a difference and support the technical core of the Internet.

Information Security Engineer

Location: from our office at Amsterdam Central station and from home

Full-time

The purpose of your role is to help secure RIPE NCC’s services and data and respond to security incidents. We are looking for someone who understands the complexities of securing data across SaaS, Cloud and on-premise infrastructures. When you join as our new Information Security engineer you will be closely working together with system, network and software engineers across the company. You will complement and support the Information Security Officer and team of Information Security Engineers.

In this role, you will:

• Work with the IT Security Team to develop and manage a state-of-the-art information security infrastructure (network intrusion detection, SIEM, end-point protection and more)
• Perform security audits and check compliance with information security policies
• Evaluate and implement effective security technologies and architecture in consultation with the technical teams
• An important part of your work will be ‘Cloud security’
• Investigate new security threats and market trends
• Be part of the Computer Security Incident Response Team (CSIRT)
• Investigate and respond to security incidents

What we expect from you:

• Bachelor’s degree in IT / Information Security or related studies
• At least three years of working experience in an engineering security role
• Experience with security tools like NIDS, SIEM, EPP, EDR, etc.
• Some experience with cloud security architectures/services (specifically in AWS and/or GCP)
• Have a strong security mindset and have the desire to expand your knowledge and qualifications in information security
• Working well under pressure, complex problem-solving skills, innovative thinker, hacker mindset and hands-on mentality
• Proficiency in English (both written & spoken)

It would be nice if you have:

• Security certifications, for example: AWS Certified Security, Google Professional Cloud Security Engineer, GIAC, and/or CISSP
• Experience with programming and CI/CD tooling
• Knowledge of CIS Critical Security Controls, or other information security frameworks (ISO 27001, COBIT, etc.)

What can we offer you?

• A flexible and informal work environment with an emphasis on healthy work/life balance
• An opportunity to expand your technical knowledge and grow in your career
• An annual salary between EUR 51.000 and EUR 72.000 (before tax) for 37.5 hours per week. This includes the standard 8% annual “holiday pay” and a 5% end-of-year bonus
• Excellent secondary benefits including a non-contributory pension scheme, top-tier health insurance coverage for you and your family, annual budgets for health/technology/transportation and 30 vacation days plus 3 collective days
• A generous training allowance for professional development
• Once we’re finally past COVID-19, travel (international) two-three times per year to attend TF-CSIRT meetings, training courses and attend security conferences

Information Security, Risk & Compliance Department

We are a new team within the RIPE NCC, combining several existing disciplines. We play a critical role in keeping the infrastructure of the RIPE NCC and the data of our members secure. An integral part of the job is working with other departments to support their security needs. We are always looking to innovate and make our processes more efficient by implementing state-of-the-art information security technologies

About the RIPE NCC

The RIPE NCC is a not-for-profit organisation founded on the belief that the Internet should be governed openly, transparently and in partnership with the wider Internet community. We are one of the oldest Internet organisations in Europe and proud of our legacy.

Our strongest asset is our staff. We bring together 160 people from more than 38 countries in our modern, vibrant office in the east wing of Amsterdam Central Station. At the moment it's possible to work from the office and from home. Our official working language is English, but more than 30 languages are spoken by our colleagues.

Our backgrounds are diverse, but our goal is the same: we work for the good of the Internet.

How to apply

If you are interested, click on the Apply Button and fill in the short application form. Make sure to include your CV and a well written motivation letter (English only please). A pre-employment screening (done by Validata) will be part of the recruitment process.