Vulnerability Management Analyst/Consultant

As a Vulnerability Management Analyst/Consultant, you are a hands-on colleague in the information security team of the Randstad Digital Factory. This team is responsible for the full breadth of information security at Randstad, from defining Randstad’s information security policy to providing operational services that help keep Randstad secure.

In this new role of Vulnerability Management Analyst/Consultant we’re looking for someone hat will be responsible for our automated application and infrastructure scanning services. You’ll work with Operating Company teams to analyse vulnerabilities found and will help them define ways to resolve or mitigate. Next to that you will work with the scanning services provider to make sure the services provided work as expected and we provide a quality service to our Operating Companies.

You are expected to be able to analyze, interpret the outcome of the scanning and translate this to solutions or an advise. We are not looking for someone who is an expert with the usage and functionality of the scanning tool. You will be more an analyst or consultant.

Responsibilities

• End to end responsible for our infrastructure and application scanning services;

• Define, implement and manage the global infrastructure and application scanning services;

• Manage adoption of the services within Randstad;

• Review the results to analyse security vulnerabilities and risks exposing Randstad’s networks, systems or applications;

• Collaborate with our OpCos to advise them on any vulnerabilities found and assist them in fixing or mitigating the risks through technical guidance;

• Drive and improve risk mitigating and remediation strategies, process and procedures across the Randstad group;

• Reporting on the overall status and vulnerabilities across the group, track and report on remediation efforts;

• Work with the service provider to ensure correct functioning of the services, as well as suggest enhancements and influence future developments of these services;

• Educate stakeholders on risks and recommendations.

Must haves

• Higher educational level or Master Degree (or equivalent) in Information Technology;

• 6+ years experience in IT of which at least 3 years in security;

• Experience with infrastructure and application scanning tool (for example Burp, Rapid7, Outpost24 or comparable;

• Experience in vulnerability assessments, remediation and mitigation;

• Experience and/or knowledge of security within (software development life cycle [SDLC], security by design and/or OWASP) ;

• Ability to communicate to stakeholders the real-world impact of threats and vulnerability exploitation in a given environment; for technical and non-technical audiences.

Nice to haves

• CISM, CISSP or comparable certification;

• Technical understanding of common network, system, and application vulnerabilities;

• Familiarity with concepts such as CVE, and CVSS Threat Intelligence.

General competencies

• Good command of the English language;

• Proficiency in other languages (helpful but not essential);

• Excellent analytical skills and accurate;

• Empathic and proficient in managing multiple stakeholders;

• Self-starting and self-supporting;

• Hands-on;

• Good technical project management skills;

• Service-oriented;

• Likes to work in an international environment with different cultures;

• Good communication skills;

• Enthusiastic and pragmatic, result driven.

• Duration: 6 months

• Hours/week: 32 - 40

• Availability: asap

• Preferably living in The Netherlands

• CV in English including a motivation letter