Security Operations Engineer

about 1 month ago
Full time role
Hybrid · Remote · Luxembourg... more
Are you ready to put your security engineering skills to truly good use? Want to accelerate your career in an innovative and technology-focused organization? Join us at SustainCERT!
 
Your role
As our next Security Engineer, you will join our growing Technology & Data team. More specifically, you join our Security Team, which is responsible for information security across the organization.
 
As a Security Engineer at SustainCERT, you will be part of a dynamic and challenging environment where you can make a high impact and have the opportunity to work on different areas of Information Security. We are looking for a flexible, optimistic, energetic, and enthusiastic individual to support the Chief Security Architect in implementing and managing security controls as part of our Security Strategy and Plan.
 
Our work takes place largely in a remote fashion. For this role, you are ideally based in Luxembourg. Applications from candidates within the European Union that are willing to relocate will be considered case by case.


Your key tasks 

  • Secure SDLC/CI/CD Process:
  • Support the Chief Security Architect in building, maintaining, and improving secure Software Development Life Cycle (SDLC) and Continuous Integration/Continuous Deployment (CI/CD) tools and processes. 
  • Offensive Security Activities:
  • Perform internal penetration tests and vulnerability assessments of SustainCERT's applications, platform, and infrastructure. 
  • Coordinate external penetration testing activities with vendors and clients. 
  • Identify, report, and maintain vulnerabilities on SustainCERT's platform, applications, and cloud infrastructure. 
  • Maintain the responsible disclosure program for SustainCERT. 
  • Security Operations:
  • Manage and improve Microsoft 365 Security, Azure cloud security, security/SIEM monitoring, incident response and investigation, and maintain and improve XDR/EDR, MDM, and anti-phishing solutions. 
  • Security Awareness Initiatives:
  • Contribute to the development and implementation of security awareness initiatives and foster a strong security culture within the organization. 
  • Regulatory Compliance:
  • Support and contribute to compliance efforts related to SOC2, ISO, and GDPR regulations. 
  • IT Support:
  • Provide Level 2 troubleshooting support for IT and security issues.

You have these claims to fame 

  • Bachelor’s degree (or equivalent) in Computer Science, Data Science, or a related field.
  • At least 4 years of professional experience in a security engineering role, ideally with a SaaS product company. 
  • Experience with agile processes. 
  • Personal qualities of integrity, credibility, and dedication to combatting climate change. 
  • Strong team player. 
  • Good communication and interpersonal skills. 
  • Proven experience in information security roles, with a focus on security operations, pentesting, and vulnerability management.
  • Strong knowledge of secure SDLC, CI/CD processes, and risk management.
  • Experience with Microsoft 365 Security, Azure cloud security, and SIEM tools.
  • Familiarity with SOC2, ISO, and GDPR compliance.
  • Knowledge of SaaS software development processes.
  • Experience with IaaS and PaaS cloud environments.

Bonus points for

  • Certifications such as OSCP, OSWE, CEH, CISSP, or equivalent.

What we offer 

  • A competitive salary and benefits package;  
  • A full-time, remote role with hybrid possibilities should you be based in the Netherlands or Luxembourg;  
  • A friendly and driven team to be part of;  
  • An innovative international organization at the forefront of making a change.

Who we are

At SustainCERT, we help quantify and report on the social and environmental impacts from a wide range of sustainability interventions. Our role is to provide robust evidence of progress towards our collective sustainability goals and ensure climate pledges bring real, meaningful impact on the ground.    

We deploy technology to create the next generation of impact accounting and improve the way carbon emissions are measured, reported, and verified: more simplicity, more affordability, more efficiency and always the best level of accuracy and credibility. We are on a mission to mainstream best-practice for the benefit of all – businesses, people, and the planet.    

Come join our team of mission-driven professionals with big ideas, tireless optimism, and the belief that our work can change the world!