IT Cyber Defense Specialist Attack Surface Management

Your mission is to work together with the team to identify and map our attack surface. 

Would you like to use your expertise to secure the digital backbone of the Dutch energy grid? Enexis is at the heart of the energy transition, operating in a unique landscape where corporate IT and industrial Operational Technology (OT) come together. To protect our critical infrastructure, we are building a Cyber Attack Surface Management (CASM) team. We are looking for several security professionals to help us gain and maintain a clear overview of our attack surface and manage the associated risks. 

We have opportunities for both IT security professionals and OT security professionals. Experience in both domains is not required. What matters most is that you have a solid foundation in one of these areas and the motivation to further develop your expertise.

This is how you take on the challenge 

Your mission is to work with the team to map and analyze our attack surface and help reduce it. You contribute to our proactive security approach by identifying a wide range of technical findings, such as vulnerabilities and misconfigurations in our technical IT infrastructure. You analyze these findings based on risk and within the context of Enexis, and actively advise teams on appropriate solutions. In doing so, you help make our organization more resilient every day. 

You preferably have experience in the following areas: 

Vulnerability scanning & analysis 

• Analyzing and triaging scan results and enriching vulnerability information with context and threat intelligence, for example using CVSS and EPSS.
• Validating fixes and advising operations and management teams on the most effective remediation and mitigation measures. 

Asset discovery 

• Configuring and managing asset discovery tools to gain visibility into endpoints, servers, network devices and cloud resources.
• Analyzing discovery data to identify shadow IT and reconciling findings with the CMDB. 

Data analysis & scripting 

• Analyzing and correlating data from different security sources, such as scanners, the CMDB and threat feeds, to create an integrated view of risk.
• Building and maintaining dashboards, for example in Power BI, Splunk or ServiceNow, for operational and tactical reporting.