(Medior-Senior) DevSecOps Engineer

About WebSec
WebSec is a start-up cybersecurity company in Amsterdam.

We offer a range of offensive security services such as phishing campaigns, responsible disclosure managed service, threat hunting / red teaming and of course penetration testing.

What skills are we looking for

• minimum bachelor level of education
• you have already got these certifications AZ-303, and AZ-304
• Willing to undertake AZ-500, SCS-C01
• minimum seven years of work experience in IT, with at least five years of experience in information Security
• demonstrable knowledge of application security & secure coding (OWASP)
• agile way of working in DevOps and SecOps
• experience in writing and reviewing IS documentation and reports and providing advice.
• knowledge of IS risk management (frameworks) such as NIST, MITRE ATT&CK, PTES, OWASP WSTG, and TIBER-EU
• strong communication skills in English, Dutch is a big plus.

The candidate should be familiar with

• networking & security knowledge e.g.: Firewalls, Proxies, DNS, sub-netting, emerging technologies such as SDN, VoIP
• vulnerability management
• cloud security with focus on leading cloud services such as AWS and Azure
• experience with performing risk assessments, and supervising pentests
• demonstrable knowledge and experience in security processes, technologies and architectures such as hardening, patch management, access control, cryptography, communication protocols, Windows and Linux

Nice to have

• Projectmanagement Certifications such as ITILv4 or Prince2

• Security Certifications such as CISM, CISA, CISSP or OSCP
• A completed Master degree

What we offer

• Remote working opportunities
• Professional growth opportunities (inc. certifications and courses)
• Company car or public transport card
• Company laptop
• A salary between €3000 and €4000 gross
• Informal atmosphere