Vacancy Cloud Security Specialist

SURF is looking for a cloud specialist to support our educational and research institutions in the field of cloud security. Are you the independent and result-oriented go-getter who will help institutions to technically set up the cloud and make it more secure? Do you want to work at an organisation with a social impact? Then we look forward to your application!

This is where you will work

SURF is the ICT cooperative of Dutch education and research institutions. Together with them, we work on digital services and complex innovation issues to increase the quality of education and research. One of the ways we do this is with our SURFcumulus service, which we developed together with the institutions. SURFcumulus enables institutions to make legitimate use of cloud services without tendering themselves. The service has become the standard delivery model of cloud services within the education and research sector; almost all institutions in the Netherlands use SURFcumulus.

You will join this team

You will be working in team Cloud. Team Cloud consists of various cloud advisors and specialists who work closely with cloud suppliers and institutions. They monitor the quality, security and legitimacy of the cloud services we provide to our institutions. We do this not only on paper: we also check whether the implementation, technical delivery and support of these public services meet the requirements we set at SURF. When setting up cloud environments, we assess roles and rights of suppliers, check how they deal with the AVG and check what security measures they have taken. We also offer additional services to make the move to the cloud and its use and management easier We always focus on the cloud strategy of the institutions.

What you will do

As a Cloud Security Specialist, you will help our institutions use public (IaaS) cloud services securely. You will devise both technical solutions and policy guidelines appropriate for dynamic use of the cloud. You will ensure that institutions comply with the house rules of SURFcumulus and you will continuously test these rules against changing environmental factors.

What else will you do?

• You advise institutions on procedural and technical implementation of information security in the cloud. You do this both one-on-one and via training courses and webinars.
• You develop and implement security architectures for cloud environments, ensuring robust protection against threats and vulnerabilities.
• You will implement cloud security policies and processes, and apply best practices to keep cloud infrastructures secure. You use cloud-native security tools and solutions to improve security and detect threats.
• You perform cloud security tests and vulnerability scans at SURF and at the institutions;
• Together with the cloud advisors and other cloud specialists in your team, you work to provide high-quality services for the institutions.

What you will bring

As a Cloud Security Specialist, you will need knowledge of both public cloud services and information security. We can imagine that you are not an expert in both, but we encourage you to still apply. Do you know all about Microsoft Azure or Amazon Web Services, but not much about information security yet? Or are you CISSP-certified and know all about technical security, but your knowledge of public cloud services is not as extensive yet? In this position, we will give you the opportunity to deepen your knowledge in one of the two areas.

In addition, you have:

• technical knowledge of ICT infrastructure (servers, storage, backup, network) and the way cloud providers offer this. You know the differences between IaaS, PaaS and SaaS services and how they are secured;
• knowledge of public cloud services such as Microsoft Azure and Amazon Web Services;
• experience with the implementation of (cloud security) standards, e.g. CIS, NIS2, NEN 7510, ISO 27002/27017;
• relevant security certifications, or the ambition to obtain them;
• strong communication skills, you can work well together and you like to take initiative.

We offer

• A varied and challenging job for 32 to 40 hours (0.8 - 1.0 fte) in an informal and collegial atmosphere with a high level of ambition;
• Extensive training opportunities and excellent fringe benefits;
• A salary range of 4813 - 7974 EUR gross based on full-time;
• 8.33% vacation allowance, a fixed year-end bonus of 8.33%;
• 36 vacation days per year (based on a 40-hour work week);
• A good pension plan with PNO media, where you yourself contribute only 1/8th of the premium and SURF contributes 7/8ths;
• An NS Business Card 1st class;
• The opportunity for hybrid work and you will receive a home office allowance on work-at-home days;
• Two great locations, in Amsterdam and Utrecht, both with good public transport facilities. Your main location will be: Utrecht. Our Utrecht office is located within walking distance of Utrecht CS.
• A contract for one year initially, with the intention of converting to permanent employment after one year.

SURF takes great pleasure in doing its recruitment itself; acquisition is therefore not appreciated.