Security Operations Engineer

Are you a driven SecOps Engineer with a passion for cybersecurity and software engineering? Do you want to work in a dynamic environment where innovation, security and collaboration go hand in hand? Then this vacancy at HeadFirst Group is exactly what you are looking for!

Our core values - Customer first, Learn every day & Connecting people - are in our DNA, also in your work as a Security Operations Engineer. We strive to rise above ourselves every day. Our department is constantly developing and you will grow with us. What is your contribution to our continuous development and the organisation's core values? You identify areas for improvement in the process (Learn Everyday) and seek cooperation with colleagues from other departments (Connecting People). You also put the quality of our services first (Customer First)

Job description
As a Security Operations Engineer at HeadFirst Group, you will be the lynchpin between our security and software development teams and will be important in protecting our IT infrastructure and business-sensitive information. You will ensure that our digital infrastructure and applications are not only secure, but also optimally performing. You have a crucial role in setting up, implementing and improving our security processes and systems. You are responsible for monitoring, detecting and responding to security incidents, as well as implementing advanced security measures to protect our systems and data. Together with your colleagues, you will ensure that the security of our digital environment is always paramount.

What will you do:
- Integrating security into the development process (DevSecOps);
- Monitoring and resolving security incidents and vulnerabilities;
- Developing automated security solutions and performing penetration testing;
- Collaborating with software and infrastructure teams to establish secure CI/CD pipelines;
- Keeping security protocols and compliance requirements up-to-date;
- Advising management and other teams on security issues and best practices. Create and implement awareness programmes to train employees on secure behaviour;
- Ensure compliance with relevant laws and regulations, such as the AVG, and internal policies related to data protection.