Key Skills

Job Description

As a Senior Security Engineer, you will ensure our cloud infrastructure and GovTech applications are secure by design and in operation. This is a broad, impactful security role. Collaborating with an international team of Cloud and Software Engineers, you will help secure 20+ applications. You will operate with minimal bureaucracy while tackling the complex technical challenges of an integrating tech organization. You will take broad ownership of our technical security strategy, consistently prioritizing pragmatic, long-term solutions and practical implementation over theory. Your Responsibilities: Cloud & Platform Security: Enhance and assess the security of our Cloud and Kubernetes environments. Design secure-by-default architecture and actively represent Security on the Architecture Board. Application Security: Define secure-by-default guardrails within our CI/CD pipelines and core systems. Partner with the Security team to deliver self-service tooling, empowering 20+ development teams to build securely and take ownership of their application security. Vulnerability Management: Configure and optimize centralized tooling to detect, report, and automatically remediate vulnerabilities across our core infrastructure. Infrastructure & Access: Design, manage, and mature our SIEM landscape.Defining and enforcing IAM frameworks and RBAC policies. Knowledge Sharing & Collaboration: Work pragmatically with developers, cloud engineers, and compliance teams to continuously elevate our security standards. Participate in security risk assessments and help technical leadership interpret complex vulnerabilities. About You We are looking for an experienced, pro-active Security Engineer who enjoys working across multiple security domains. You will have the autonomy to make a tangible impact across multiple security domains. Taking ownership of technical security initiatives comes naturally to you. Our engineering culture emphasizes hands-on, pragmatic execution. Practice over theory, You pair a strong technical foundation with the ability to independently plan, prioritize, and deliver results aligned with business objectives. You do not need to check every box to be successful, but solid experience in most of the following areas is preferred: AWS and Kubernetes security Application and cloud security Vulnerability management Identity & Access Management (IAM) Workstation & Endpoint security Security event metrics, alerting, and SIEM configuration CI/CD pipeline security Nice-to-Haves: Software development or scripting experience Security or cloud certifications (e.g., AWS Certified Security – Specialty, CKS, or equivalent) Proficiency in Dutch (spoken and written) We strongly encourage applications from candidates who may not meet every single requirement but bring other valuable experience to the role. What We Offer A close-knit, enthusiastic team of professionals who actively support one another. High autonomy and ownership: flexibility in how you manage your work, backed by supportive leadership. Hybrid work model: freedom to work remotely, combined with set office days for collaboration and team events. Continuous growth opportunities through the xxllnc Academy for personal and professional development. A competitive compensation package including salary, mobility allowance, laptop, phone stipend, and home-office allowance. Engaging team events and social activities. Submitting a Certificate of Good Conduct (VOG) is required as part of our onboarding process. About Us xxllnc develops scalable software for public sector organizations, powering solutions for case management, data integration, taxation, social services, and urban planning. We also provide specialized consultancy and professional services. To elevate GovTech across Europe, xxllnc is building an independent ecosystem where systems interoperate seamlessly, combining cloud applications with specialized domain expertise. Our team of 380+ professionals develops more than 30 applications for European government agencies. xxllnc serves approximately 1,200 public sector organizations across ten locations in Europe, including Dutch offices in Hengelo, Amsterdam, Veenendaal, Groningen, and Eindhoven.

Core Responsibilities

Secure cloud infrastructure, Kubernetes environments, and more than 20 applications by designing secure architectures and embedding security guardrails into CI/CD pipelines. Manage vulnerability detection and remediation, SIEM, IAM and RBAC, and collaborate with engineering and compliance teams to improve security practices.

Requirements

The role seeks an experienced security engineer with strong hands-on skills across cloud and application security, preferably including AWS, Kubernetes, vulnerability management, IAM, endpoint security, SIEM, and CI/CD security. Candidates should be able to independently own and deliver pragmatic security initiatives; software development or scripting experience and relevant certifications are advantageous.

Benefits

• Mobility Allowance
• Laptop
• Phone Stipend
• Home-Office Allowance
• Professional Development Opportunities
• Hybrid Work