Security Practice Lead

At i3D.net, we provide world-class global coverage with one of the most interconnected networks in the world. Our solutions focus on low latency, zero packet loss, and unmatched scalability, enabling seamless experiences for millions of users worldwide. With dedicated support, bespoke solutions, and cutting-edge technology, we deliver reliable, cost-efficient infrastructure that empowers game developers and businesses to scale effortlessly. Partnering with major names like Nvidia, DuckDuckGo, and Ubisoft, we are shaping the future of gaming and network technology. WHY YOUR ROLE MATTERS At i3D.net, we’re building our internal security foundation, and you’ll be right at the center of it. As our Lead Security Analyst, you’ll play a key role in securing our Microsoft environment (including Azure, Entra ID, and IAM), while also working on broader topics like incident response, tooling improvements, and DDOS investigations. We’re currently moving to a new Microsoft tenant, which means you’ll help shape security from the ground up. This includes defining how access is managed, working closely with the Workspace Management (WSM) team, and supporting the rollout of new security controls and monitoring tools. You’ll collaborate closely with our other Security Analysts and subject matter experts to strengthen detection and response and help support our future SOC capabilities and i3D’s overall security program. WHAT YOU’LL BE DOING * Ownership of securing our environment from the physical layer all the way up to application: Help design and improve the security of our Azure tenant, Entra ID, and identity and access setup. * Partner with the Workspace Management (WSM) team: You’ll guide protecting employees, endpoints and tools. Coordinate with the team that manages rights, starters, movers, and leavers, so access stays under control and risks are caught early. * Tracking, and handling escalated alerts and incidents: Investigate alerts, respond to breaches or policy violations, and make sure issues are resolved properly. * Drive continuous improvement: Suggest smarter ways of working, contribute to the development of security tools and processes, and strengthen the overall security posture of the company. * Partnering with Risk and Compliance teams: maintain and enable our compliance with frameworks such as ISO27001 and NIS2 * Lead vulnerability management: Drive system patching efforts for user endpoints and server infrastructure, making sure vulnerabilities are addressed quickly and effectively. * Support our SOC setup: Help implement or improve tooling like SIEM and SOAR together with the other Security Analyst(s) and partners. * Stay ahead of threats: Track what’s happening in the security world and help us stay a step ahead. * Keep others informed: Make sure relevant updates get to the right people, and that security processes are well documented. * Collaborate with external partners: Join conversations with groups like CSIRT-DSP and handle outside security contacts when needed. * Work with internal teams: Server as a SME and business partner to aid other departments and product teams to improve how they handle security in their own systems and workflows. WHAT SUCCESS LOOKS LIKE IN THE FIRST YEAR * Our technology environment is safer, easier to manage, and aligned with best practices. * Alerts and incidents are handled faster and with more confidence, reducing overall risk. * Our SOC tooling and processes have improved, thanks to your input and collaboration. * Vulnerability management is running smoothly, and critical systems are patched on time. * The company’s overall security posture has strengthened - security is embedded in workflows and visible across teams. * You’ve made yourself known across the company as someone who drives security forward and gets things done. YOUR PROFILE * Broad security ownership experience: You bring 5+ years of experience securing enterprise environments and have owned security outcomes across identity, infrastructure, endpoints, cloud, and incident response. You have been responsible for improving security posture, not just monitoring it. * Deep Microsoft security expertise: You have hands-on experience securing Azure, Entra ID, Conditional Access, Privileged Identity Management (PIM), Intune, and Microsoft Defender. You understand how to design and implement secure identity and access controls at scale. * SOC/Blue Team experience: You've monitored, detected, and responded to security threats in live environments, led incident investigations, and coordinated remediation across multiple teams. * Security tooling and detection engineering: You have experience implementing and improving SIEM, SOAR, and detection capabilities, developing use cases, tuning alerts, and increasing the effectiveness of security monitoring. * Vulnerability management leadership: You have driven vulnerability remediation programs, partnered with infrastructure teams to prioritize risks, and ensured critical findings are resolved effectively. * Security architecture and stakeholder influence: You are comfortable advising technical teams, challenging existing approaches, and helping shape security controls, standards, and processes across the organization. * Reliable and flexible when needed: You’re available when something urgent comes up, even outside of regular hours. * Netherlands-based and Hybrid-ready: You live in the Netherlands and are happy to join us on-site around two days a week. GOOD TO HAVES * Experience with SIEM and SOAR tooling: It’s a plus if you’ve worked with tools like Wazuh, Sentinel or Splunk and helped set them up or improve how they’re used. * Certifications: CISSP, CISM, CompTIA Security+, CySA+, AZ-500, or SC-900 or other relevant security certifications help, but your real experience matters most. * Familiarity with secure development practices is a bonus. WHY JOIN US? * Real Impact: Your work directly protects our employees, platform, our customers, and the broader internet, from handling DDOS cases to shaping how we secure our systems. * Small Team, Big Ownership: You’re not just a cog in the machine; you’ll help shape tools, processes, and how we grow our security practice. * Competitive Perks: Enjoy great pay, shift bonuses, annual bonus, 25 vacation days (excluding national holidays), travel allowance, and a premium-free pension. * Skill Development: Level up with career guidance and education reimbursement. * Gaming Perks: Get lifetime access to Ubisoft’s game library and two free games every year. * Stay Active: Use our in-house gym in Rotterdam or unwind in the game and music rooms.

About Yondr Yondr is a disruptor. We challenge convention and simplify complexity. A global developer, owner operator and service provider of data centers, we deliver complex data center capacity needs for the world’s largest tech companies. Our exponential growth sees us looking for extraordinary people to help accelerate us towards our vision: a tomorrow without constraints.    But we can’t do this without you. About the Role  Our business is growing and we need an experienced Information Security engineer to join our Global Technology Security team with a proven track record of building/operating in a modern Information Security practice in a global organisation. You will have developed, managed and implemented information security controls and processes.   This will involve a range of activities including consultative engagements, project-work, pro-active security testing, vulnerability management, auditing, reporting and investigations.  You’ll be responsible for conducting risk assessment, policy creation and awareness training while staying up to date with other industry best practices. You’ll be hands-on with a variety of security technology and interact with various internal teams to lead and deliver best-in-class solutions in an exciting fast-paced environment.  Dynamic, smart people and inspiring, innovative technologies are the norms here.     Main Responsibilities    * Drive the evolution of the company’s Information Security standards to maintain best practice and alignment with corporate policies and regulatory requirements  * Be hands on in managing and maturing our security technology and processes  * Investigate and respond to information and cybersecurity incidents  * Provide consultation and/or education as needed and drive the adoption of security as a value add/best practice  * Work in partnership with stakeholders, to ensure all projects, changes, IT standards and procedures are compliant with Information Security Standards and Policies  * Manage (third party) penetration testing and facilitate any subsequent remediation activities  * Act as a subject matter expert on matters of Information security relating to Yondr  * Conduct 3rd party risk assessments to ensure suppliers are aligned with our security standards and fall within our risk tolerances  * Manage phishing platform, training and related reporting   * Provide guidance and subject matter expertise on processes, controls, and objectives around audit and information security activities, best practices, and process improvements  * Conduct vulnerability assessments, risk analyses, and remediation tracking to drive the attack surface management program  * Conduct Identity and Access Management entitlement reviews of key platforms and applications  * Engage in audits, compliance assessments, and regulatory security requirements  * Maintain documentation related to security processes, incidents, and compliance requirements    Qualifications and experience  * Experience with regulatory and compliance standards; ISO27001, SOC2, PCI DSS  * 5+ years experience working as an information security professional within a medium to large sized global organisation  * Proven experience implementing, maintaining and leading an effective information security control assurance programme  * Strong stakeholder management and communication skills, including technical members of staff and senior non-technical business leaders  * Applied working knowledge of networking principles and the OSI model to evaluate control effectiveness and support investigation of network‑based security incidents  * Background in working with international organizations that provide 24x7x365 operations  * Must understand OT, Network and Zero-trust architecture   * Understanding of email security tools, vulnerability management, penetration testing and remediation  * Strong analytical, troubleshooting, and problem-solving skills  * Information Security, alongside significant knowledge and experience of Cyber security  * Working knowledge of Microsoft Sentinel, Qualys, Microsoft Defender, Knowbe4 are essential.    * Exposure to Microsoft Purview, MDR services, UBA and IT/OT network environment are desirable  * Excellent verbal and written communication skills  * Ability to manage multiple priorities and work independently or within a team environment  * Relevant certifications preferred, such as:  * * CISSP  * * Security+  * * CISA  * * CEH  * * GSEC  * * Microsoft Certifications    At Yondr, we want to enhance the diversity, equity, inclusion and belonging of our workforce to reflect the world we live in. Our roles are potential opportunities for everyone; all interested parties, regardless of nationality, race, ethnicity, religion, age, sexual orientation, or gender, are welcome to apply. We ensure all candidates have equitable access and consideration throughout the hiring process.   Yondr is committed to fostering a welcoming, safe and inclusive work environment. We provide support through our benefits, which are inclusive of all backgrounds.