Serve as the security subject matter expert for cloud and hybrid environments
Provide guidance on secure architecture, cloud security best practices, and risk reduction initiatives
Monitor, assess, and improve cloud security posture across Azure, AWS, and other cloud platforms using CNAPP, CSPM, and vulnerability management tooling
Identify and drive remediation of cloud security risks, vulnerabilities, misconfigurations, and infrastructure weaknesses
Own and improve the vulnerability management lifecycle, including vulnerability discovery, risk assessment, prioritization, remediation tracking, and validation
Operate and optimize security and vulnerability management platforms such as Rapid7 InsightVM, InsightCloudSec, Qualys, Tenable, or similar technologies
Develop security standards, hardening guidelines, and implementation recommendations for cloud and infrastructure teams
Support secure deployment of cloud-native technologies, containers, Infrastructure as Code (IaC), and DevSecOps practices
Drive continuous improvement through automation, reporting enhancements, AI-assisted workflows, and process optimization within Security Operations

5–7+ years of experience in Cloud Security, Security Engineering, Infrastructure Security, or Vulnerability Management
Strong knowledge of Azure security concepts and services, with exposure to AWS and/or GCP
Experience with Cloud Security Posture Management (CSPM), CNAPP, and cloud governance practices
Hands-on experience with vulnerability management platforms such as Rapid7, Qualys, Tenable, or Nessus
Knowledge of Windows, Linux, networking, identity and access management, authentication protocols, encryption, and infrastructure security controls
Understanding of Kubernetes, Docker, Terraform, Ansible, DevSecOps, and Infrastructure as Code is a strong advantage
Experience with security automation, orchestration, or AI-assisted operational improvements is desirable
Strong analytical, communication, stakeholder management, and problem-solving skills
Good English language skills (Dutch, French, or other European languages are a plus)

Types of leave granted from day 1 (annual leave, study leave, maternity/paternity leave, wedding leave, compassionate leave)
Eligible for seniority leave after 3 years
Medical insurance fully paid by SD Worx for you and two dependents
Option to upgrade medical insurance
Eligible to enroll parents in medical insurance at a subsidized rate
Monthly fixed transport allowance
No deduction for using the company’s transport after work
Eligible for a mobile voucher, redeemable every 3 years
Fixed internet allowance for home use
Career break option
Workation: opportunity to work from any SD Worx location (4 weeks per year, EU only)
Yearly performance review with remuneration review
Yearly company bonus
Car loan: subsidized interest facility
Referral program
Learning opportunities through an individual development plan and professional training
Career growth opportunities

Cloud Security Engineer

Key skills