Infrastructure Security Engineer

Are you passionate about technology and security, and are you living in the Netherlands? We’re looking for a security specialist to join the IT operations team that manages the SRE responsibilities that keeps the Paylogic ticketing platform running smoothly for our event organizers and ticket buyers.

The Paylogic platform handles ticketing for many popular festivals in the Benelux and the rest of Europe, specializing in high performance ticket sales that attract a lot of attention. Because of this we have a strong focus on performance, reliability and security.

We’ve recently started integrating Akamai CDN based security solutions like WAF, BMP, Content Protector and Account Protector. Your job will be to ensure the continued smooth operation of this integration. Because of this, existing experience with Akamai is a must.

• Ensuring and raising awareness of (cyber) security concerns.
• Coordinating between our internal development teams working on Paylogic and the cybersecurity team of CTS Eventim headquarters.
• Handling internal infrastructural IT audits, ensuring appropriate controls are in place, and helping to facilitate audits of clients.
• Coordinating audits of code bases and pentesting of web services.
• Handling responsible disclosures from external parties.
• Automated vulnerability scans.

In addition to the above you will also be part of the decision making process on how we further improve our security posture.

When the security workload allows you will also participate in the broader work of the IT operations team. An interest (or even passion!) in programming and/or infrastructure automation is a big plus.

• A positively challenging position in an ambitious company with big plans for the future 💪. We’re expanding from the Benelux to many other European countries and we have plans for the US as well.
• You will be(come) our expert on IT security, with a team of software and SRE engineers looking to you for guidance on how best to ensure the security of the Paylogic ticketing platform.
• You’ll be working in a small, tight-knit team of technology enthusiasts for whom IT is as much a job as a passion. Outside of work we like to do things like build and maintain our home automation solutions, work on our “home labs”, develop programming solutions to complex problems, etc.
• We offer the flexibility of hybrid working where we work from the office on some days and from home on other days, after onboarding (during onboarding it helps to sit together to get to know each other and optimize knowledge sharing).
• A positive company culture that encourages strong cohesion between colleagues, both within and between teams. It can feel like a second family once you get to know us 😊 (if you’re open to that sort of thing).
• Living in the Netherlands, preferably in the north (to work from our Groningen office). We also have an Amsterdam office, so there is some flexibility with regards to the preference for Groningen, but it would complicate onboarding 🙂.
• Comfortable using headless Linux servers:
  Our complete ticketing platform is running on Ubuntu Linux servers and we also operate local tooling that uses Linux, so you need to be comfortable using Linux on the client and server.
• Fluent English is a must, decent control of the Dutch language is a plus but not required.
• Solid knowledge of cybersecurity fundamentals (authentication, authorization, access control, encryption, attack vectors, stakeholders, auditing, etc).
• It’s important that this knowledge translates to “on-premise” infrastructure (hosted in a physical datacenter with control of hardware). In other words we’re not looking for a cloud security specialist.
• Decent knowledge of web application security (HTTPS encryption standards, OWASP guidelines, operating security scanners, handling responsible disclosure, etc).
• Experience with Akamai CDN based security solutions like WAF, BMP, Account Protector and Content Protector. The day-to-day usage of our integration with these Akamai security solutions will be a significant part of your job.
• An interest in infrastructural automation using Python. Existing…