Security Consultant

Home Vacancies Security Consultant

We are an organization of friendly, skilled professionals who trust each other, keep each other sharp, and help each other grow. No distant management behind closed doors, but an open working environment where you can easily find each other and where cooperation feels natural. With us, people are not numbers. Trust, equality, and mutual respect are the norm.

We work according to The Valid Way: an informal, growth-oriented culture in which we join forces, share responsibility, act in a customer-focused manner, and take our craftsmanship seriously. Trust > Tech > Thrivesays it all: we build on each other, learn continuously, and help customers and each other to grow and flourish.

In brief:

How many of your recommendations end up in a drawer because the budget gets diverted to something else anyway? How many times have you seen a risk coming months in advance, but could only reactively adjust course because security only matters once something goes wrong?

At Valid, things are different. Security isn’t on the agenda here just because it has to be—it’s a topic of discussion at executive meetings. That means your advice doesn’t end with a report; it leads to a decision.

What will you do?

You’ll work with the Microsoft stack—Azure, Defender, Sentinel, Entra ID, Purview, and MAST—and will be trusted from day one to provide independent advice to clients. You’ll be the point of contact.

Risk Management & Consulting

You will conduct security meetings with clients in an advisory capacity
You run CIS L1/L2 benchmarks to identify risks and vulnerabilities. You take responsibility for ensuring that the risks and vulnerabilities are addressed and resolved.
You set up phishing simulations and security awareness training sessions (via MAST)
You share your expertise—whether asked to or not—with both clients and colleagues
Monitoring of the agreed-upon (annual) security budgets for clients

Consulting & Guidance

If a data breach is suspected, you will conduct the Purview investigation, prepare a report, and provide specific recommendations. In doing so, you will work closely with the ISO at Datagroup Netherlands.
You are familiar with DORA, ISO 27001/27002, NIS2, and GDPR
You are familiar with and know how to apply models such as the Cyber Killchain, NIST 2, and MITRE ATT&CK for clients
You are rolling out Defender and Sentinel environments for 24/7 SOC services, in collaboration with our SOC/SIEM partner
Supporting and guiding the junior security analysts

Knowledge Sharing

You share your knowledge through consulting meetings, internal sessions, and client presentations
You help organizations improve their digital resilience with practical solutions

What do we offer?

Competitive salary based on your knowledge and experience;
Flexible working hours and opportunities to work from home;
A customized training budget;
A laptop and phone plan;
A leased car.
A culture where you can be yourself and receive support from the organization.

What do you bring?

HBO-level work and thinking skills in the fields of ICT, (cyber) security, and/or risk management;
At least 5 years of relevant work experience in information security;
Proven experience with the Microsoft Defender stack and Sentinel (required)
CISSP certification; CISA/CISM is an advantage
Understanding Azure and Modern Workplace Security (required)
Understanding Azure and Modern Workplace Security (required)
SC200 is a requirement; if you don't have it yet, you must obtain it within 2 months of starting work
You're eager to learn: threats change, but you keep up
You work independently and take responsibility

Location:

You will alternate between working from home and our office in Eindhoven. In addition, you will sometimes visit our (potential) customers on location.