Freelance: Security Engineer

Join a Product Security team focused on improving threat detection and response capabilities across web applications, mobile platforms, APIs, and supporting services. This role combines security engineering, detection development, automation, and AI driven security operations to strengthen the organization's defensive capabilities.

Responsibilities

Build, test, tune, and maintain security detections and anomaly detection use cases within a SIEM platform.

Develop detection coverage for threats including:

Account takeover

Automated abuse

Enumeration attacks

Authentication and session misuse

Access control failures

Suspicious access to sensitive data

Improve telemetry quality, event coverage, attribution, and logging capabilities.

Design and enhance AI assisted alert triage capabilities.

Improve agent workflows, tool integrations, context enrichment, and escalation procedures.

Build incident response workflows and security playbooks.

Implement response automation with appropriate controls, approvals, monitoring, auditability, and rollback capabilities.

Evaluate detection effectiveness and continuously improve based on feedback and incident learnings.

Collaborate closely with product, platform, and security teams.

Required Skills

Experience building or operating production software or security systems.

Strong hands on experience with SIEM platforms, detection engineering, security analytics, and alert tuning.

Knowledge of web, mobile, and API security threats.

Programming skills in Python, Go, or Java.

Experience developing or integrating AI agents and LLM powered applications.

Understanding of logging, telemetry, event schemas, and data quality.

Experience implementing secure automation and response workflows.

Strong stakeholder communication skills.

Nice to Have

Behavioral analytics and anomaly detection.

Machine learning based security monitoring.

Agent frameworks and LLM evaluation.

Security orchestration and incident response automation.

Application security testing and investigations.

Infrastructure as Code and CI/CD environments.

Practical info

Start: ASAP

40 hours/week

12 month contract (Freelance only)

Let op: vacaturefraude

Helaas komt vacaturefraude steeds vaker voor. We waarschuwen je voor mogelijke misleiding:

• Wij zullen nooit via WhatsApp of in een videogesprek vragen om jouw persoonlijke gegevens (zoals een kopie van je ID, bankgegevens of BSN).
• Twijfel je over de echtheid van een vacature of contactpersoon? Neem dan altijd rechtstreeks contact met ons op via de officiële contactgegevens op onze website.

Important: job fraud

Unfortunately, job fraud is becoming more common. Beware of such scams:

• We will never ask for personal information (such as a copy of your ID, bank details, or social security number) via WhatsApp or during a video call.
• If you're unsure whether a vacancy or contact person is legitimate, please reach out to us directly using the official contact details on our website.