Cyber Security Specialist, Groningen

Security Specialist / Penetration Tester– Hybrid (North Netherlands)

Introduction We are looking for a Security Specialist / Penetration Tester for a full-time position (36 hours per week - 2 year contract). This is a hybrid position, with approximately two days per week on-site, depending on team agreements.

Role Overview You will be part of an internal cybersecurity team responsible for ensuring the security and reliability of digital workplace environments within a broader government IT landscape. The organization plays an active role in improving and shaping ICT services across multiple governmental bodies by contributing requirements, proposals, and technical improvements.

As a penetration tester, you will work alongside a team of security professionals to assess newly developed applications and infrastructure components. Each tester is assigned their own projects and is responsible for validating whether systems meet defined security standards before they are approved for production.

Your work will include identifying vulnerabilities through a combination of automated scanning and manual testing techniques, targeting both internal and external system components. This may also involve reviewing source code for potential security issues. Based on your findings, you will produce clear and structured reports outlining risks, vulnerabilities, and actionable recommendations for stakeholders.

The team primarily focuses on internal systems, but occasionally supports security testing for other public-sector organizations as well.

Requirements MBO+/HBO level of thinking and working (equivalent to higher vocational education) At least 3 years of experience in penetration testing At least 3 years of hands-on experience with hacking tools, platforms, and methodologies

Preferred Qualifications Relevant certifications such as CEH, OSCP, or GPEN Strong knowledge of common vulnerabilities, including OWASP Top 10 Solid understanding of network protocols (e.g., DNS, HTTP, TCP) Familiarity with Java concepts Strong reporting and documentation skills Good time management combined with a creative, problem-solving mindsetAbility to perform and explain technical risk assessments

Does this sound like you? Then please apply with your CV and we will reach out to you as soon as possible!