Ministerie van Defensie
1 week ago
Cyber Threat Hunter
Sign up to save this job, get alerts, and apply with an optimized CV.
Company information
- Company
- Ministerie van Defensie
- Location
- Nederland Netherlands
- Posted
- 1 week ago
Job description
Job Features
LocationHuis ter Heide (Ut)Contract durationTemporary appointment with a view to a permanent contractHours per week - 38Monthly salary€5,863.00 - €7,575.00Salary levelCivil servant scale IBBAD 12 - Civil servant scale IBBAD 12LevelHBO Bachelor; WO BachelorFieldICTVacancy number73120Employment typeTemporary appointment with a view to a permanent contractJob groupCivilianJob Description
Choosing a job at the Ministry of Defence means choosing socially relevant work. You truly contribute to a safe Netherlands.
In addition to approximately 54,000 professional soldiers and reservists, over 27,000 civilians also work at the Ministry of Defence. Do you want to contribute as a civilian in your own field to a professional defence organization, and thereby to peace and security both domestically and abroad?
Cyberattacks are a daily occurrence, and high-quality IT security is more important than ever for the Ministry of Defence. At the Defence Cyber Security Centre (DCSC), you will work with a team of security specialists on the security of Defence IT systems. As a Threat Hunter within the DFIR team of DCSC, you will work to make the Ministry of Defence digitally resilient.
Information systems within the armed forces are often vital. To prevent and detect cyberattacks, the Ministry of Defence employs the Defence Cyber Security Centre (DCSC).
The DCSC must ensure that military operations are not hindered by digital threats and that Defence's information systems remain reliable. To support the activities within the DCSC, innovative tooling is urgently needed to enable new processes and improve existing ones. By knowing which threats are active, what vulnerabilities exist, and what the most critical systems are, the DCSC is capable of providing preventive support. Both remotely and on-site.
As a Threat Hunter at the DCSC, you will work on detecting advanced digital threats within Defence. You will analyze suspicious activities, develop detection methods, and work with modern tooling to identify attacks early on. You will have the space to apply your technical expertise in an environment where digital security is of national importance.
Job Requirements
- Knowledge/Education Requirements: WO work and thinking level, preferably a completed degree or a comparable combination of education and experience, verifiable in an assessment if necessary.
- Experience Requirements: Minimum of 5 years of experience in cybersecurity and/or incident response.
Competencies:
- Analyzing;
- Influencing;
- Conceptual thinking;
- Initiative;
- Accurate;
- Teamwork;
- Stress-resistant;
- Responsibility;
- Decisive.
Specific Knowledge:
- Relevant SANS/GIAC certifications such as (GCFA, GNFA, GASF, GREM, GCFA etc.;
- Relevant certifications in forensic tooling;
- Extensive knowledge in the field of networking.
Specific Skills:
- This is a Lead position; extensive experience/knowledge in the field is required;
- Experience in coaching/mentoring colleagues;
- Minimum of 5 years of experience in Digital Forensics;
- You are capable of communicating/reporting well and professionally;
- Extensive knowledge/experience in various operating systems.
General:
You have demonstrable experience in cybersecurity, with a clear focus on CRRT. You possess in-depth knowledge of networks, malware analysis, and detection techniques, and have obtained relevant certifications through SANS or comparable training institutes. Additionally, you have experience with scripting in, for example, Python or PowerShell.
Employment Conditions
Salary levelCivil servant scale IBBAD 12 - Civil servant scale IBBAD 12Salary descriptionThe stated salary is based on a full 38-hour work week. Your placement will be based on your work experience and educational background.Monthly salary€5,863.00 - €7,575.00Employment typeTemporary appointment with a view to a permanent contractContract durationTemporary appointment with a view to a permanent contractMaximum number of hours per week38Other Employment Conditions
- Upon commencement of employment, you can choose to extend your working hours to 40 hours, or shorten them to 36 hours per week, with the possibility of working 4 times 9 hours a week.
- The Ministry of Defence places great importance on personal growth and offers excellent study facilities, ensuring you are always moving forward. You will be given every opportunity to develop yourself and advance your career.
- At the Ministry of Defence, instead of holiday pay or a year-end bonus, you accrue an Individual Choice Budget (ICB) each month. This is 16.33% of your gross annual salary. You can use it to purchase additional leave hours or for tax purposes.
- In addition to a pension scheme with ABP, you will receive a monthly contribution for commuting expenses or, under favorable conditions, you can opt for a public transport pass with unlimited travel throughout the Netherlands.
- We also believe it is important that you can combine your work well with your private life. Various leave arrangements, such as 75% paid parental leave, and flexible working hours contribute to a good balance.
- Furthermore, you can work from home at the Ministry of Defence and will receive a reimbursement for home working days. You can have the purchased home working equipment reimbursed to set up your home workspace.
Specifics
- Job interviews will take place from the second week after 07-10-2026; it is possible that interviews with external candidates will be scheduled later or not at all, as the internal selection round will be held first.
- This vacancy is open both internally and externally. In case of equal suitability, internal candidates have preference.
- A security investigation is part of the selection procedure.
- A reference check and assessment may be part of the selection procedure.
- To be eligible for this position, you must be from a country within the European Economic Area. If this is not the case, you must possess a combined residence and work permit (GVVA).
- The start date is not fixed.
- Solicitation is not appreciated.
#LI-RU1 #LI-Hybrid
More About The Job Group
Organization Name
Ministry of Defence
Organization Description
The Ministry of Defence is committed to the interests, welfare, and freedom of the Netherlands. We are active daily at home and abroad. Our global deployment strengthens international cooperation and ensures that people can develop freely. Now and in the future.
Approximately 79,000 people work directly and indirectly for the Ministry of Defence on peace and security. The ministry consists of the Materiel & IT Command (COMMIT), the Staff Directorate (the department), the Royal Netherlands Navy, the Royal Netherlands Army, the Royal Netherlands Air Force, the Royal Netherlands Marechaussee, and the Defence Support Command (DOSCO).
The Ministry of Defence is one of the largest employers in the Netherlands and resembles a large corporation. The operational commands (sea, land, and air forces), the Marechaussee, DOSCO, and COMMIT function like operating companies.
Organization URL
www.defensie.nl/organisatie/commit
Department Name
Materiel and IT Command
Department Description
Our Digital Forensics & Incident Response (DFIR) team is growing, driven, and in full development. We work within the Defence Cyber Security Centre (DCSC) on investigating and handling digital incidents that can impact the security of Defence.
What characterizes us? A strong team spirit, technical curiosity, and the willingness to help each other when needed.
The DCSC makes a unique proactive and reactive contribution to the security of information on IT networks and (weapon) systems of Defence and Dutch society (so-called digital resilience). In this context, the DCSC is the primary point of contact for defensive cyber activities within Defence. DCSC collaborates with national and international partners on the protection of 'digital information', innovations, and knowledge building within the digital domain. The DCSC anticipates the increasing dynamics and complexity in the cyber domain. The service provision is both guiding and supportive to the digital resilience of Defence.
Within the NIST Cyber Security Framework (with the capabilities IDENTIFY, PROTECT, DETECT, RESPOND, and RECOVER), the DCSC is defense-wide guiding for the capabilities DETECT and RESPOND. The DCSC supports the execution of the other NIST capabilities within Defence with, among other things, information and advice.
Vision
The Materiel & IT Command (COMMIT) supports the transition to an information-driven and technologically advanced military with the best materiel and the best IT. Our COMMITment is strong to strengthen the crucial role as a strategic partner of the Commander of the Armed Forces, of the operational units, and of international partners. COMMIT increases the impact of support through an integrated and innovative approach to materiel and IT projects, (weapon) system management, and chain logistics.
We invest in the quality of our people and the flexibility and diversity of the workforce. The most important capabilities of COMMIT are the knowledge and experience of our personnel. To provide the military with materiel and IT faster, we focus on process and social innovation in project management, procurement, and disposal of defence materiel, and personnel and logistical support, in addition to technological innovation.
Executing innovative projects requires more collaboration with the business community, knowledge institutions, and other government organizations and societal institutions. Under the umbrella of C-COMMIT as National Armaments Director (NAD), we also develop and strengthen international cooperation in the field of materiel and IT (NATO, EU, multinational, and bilateral).
Mission
COMMIT provides the military with the best materiel and the best IT.
Extra
COMMIT is for everyone and by everyone; we are convinced that with a diverse and inclusive organization, we can best perform our task, connecting willingness and capability, when our personnel are a reflection of society. We therefore cordially invite you to apply for this position!
Department URL
www.defensie.nl/organisatie/COMMIT
Contact Persons
For more information about this vacancy:
For more information about the application procedure:
Rocco Uijttewaal
[email protected]
Choosing a job at the Ministry of Defence means choosing socially relevant work. You truly contribute to a safe Netherlands.
In addition to approximately 54,000 professional soldiers and reservists, over 27,000 civilians also work at the Ministry of Defence. Do you want to contribute as a civilian in your own field to a professional defence organization, and thereby to peace and security both domestically and abroad?
Cyberattacks are a daily occurrence, and high-quality IT security is more important than ever for the Ministry of Defence. At the Defence Cyber Security Centre (DCSC), you will work with a team of security specialists on the security of Defence IT systems. As a Threat Hunter within the DFIR team of DCSC, you will work to make the Ministry of Defence digitally resilient.
Information systems within the armed forces are often vital. To prevent and detect cyberattacks, the Ministry of Defence employs the Defence Cyber Security Centre (DCSC).
The DCSC must ensure that military operations are not hindered by digital threats and that Defence's information systems remain reliable. To support the activities within the DCSC, innovative tooling is urgently needed to enable new processes and improve existing ones. By knowing which threats are active, what vulnerabilities exist, and what the most critical systems are, the DCSC is capable of providing preventive support. Both remotely and on-site.
As a Threat Hunter at the DCSC, you will work on detecting advanced digital threats within Defence. You will analyze suspicious activities, develop detection methods, and work with modern tooling to identify attacks early on. You will have the space to apply your technical expertise in an environment where digital security is of national importance.
- Upon commencement of employment, you can choose to extend your working hours to 40 hours, or shorten them to 36 hours per week, with the possibility of working 4 times 9 hours a week.
- The Ministry of Defence places great importance on personal growth and offers excellent study facilities, ensuring you are always moving forward. You will be given every opportunity to develop yourself and advance your career.
- At the Ministry of Defence, instead of holiday pay or a year-end bonus, you accrue an Individual Choice Budget (ICB) each month. This is 16.33% of your gross annual salary. You can use it to purchase additional leave hours or for tax purposes.
- In addition to a pension scheme with ABP, you will receive a monthly contribution for commuting expenses or, under favorable conditions, you can opt for a public transport pass with unlimited travel throughout the Netherlands.
- We also believe it is important that you can combine your work well with your private life. Various leave arrangements, such as 75% paid parental leave, and flexible working hours contribute to a good balance.
- Furthermore, you can work from home at the Ministry of Defence and will receive a reimbursement for home working days. You can have the purchased home working equipment reimbursed to set up your home workspace.
- Knowledge/Education Requirements: WO work and thinking level, preferably a completed degree or a comparable combination of education and experience, verifiable in an assessment if necessary.
- Experience Requirements: Minimum of 5 years of experience in cybersecurity and/or incident response.
Competencies:
- Analyzing;
- Influencing;
- Conceptual thinking;
- Initiative;
- Accurate;
- Teamwork;
- Stress-resistant;
- Responsibility;
- Decisive.
Specific Knowledge:
- Relevant SANS/GIAC certifications such as (GCFA, GNFA, GASF, GREM, GCFA etc.;
- Relevant certifications in forensic tooling;
- Extensive knowledge in the field of networking.
Specific Skills:
- This is a Lead position; extensive experience/knowledge in the field is required;
- Experience in coaching/mentoring colleagues;
- Minimum of 5 years of experience in Digital Forensics;
- You are capable of communicating/reporting well and professionally;
- Extensive knowledge/experience in various operating systems.
General:
You have demonstrable experience in cybersecurity, with a clear focus on CRRT. You possess in-depth knowledge of networks, malware analysis, and detection techniques, and have obtained relevant certifications through SANS or comparable training institutes. Additionally, you have experience with scripting in, for example, Python or PowerShell.
Our Digital Forensics & Incident Response (DFIR) team is growing, driven, and in full development. We work within the Defence Cyber Security Centre (DCSC) on investigating and handling digital incidents that can impact the security of Defence.
What characterizes us? A strong team spirit, technical curiosity, and the willingness to help each other when needed.
The DCSC makes a unique proactive and reactive contribution to the security of information on IT networks and (weapon) systems of Defence and Dutch society (so-called digital resilience). In this context, the DCSC is the primary point of contact for defensive cyber activities within Defence. DCSC collaborates with national and international partners on the protection of 'digital information', innovations, and knowledge building within the digital domain. The DCSC anticipates the increasing dynamics and complexity in the cyber domain. The service provision is both guiding and supportive to the digital resilience of Defence.
Within the NIST Cyber Security Framework (with the capabilities IDENTIFY, PROTECT, DETECT, RESPOND, and RECOVER), the DCSC is defense-wide guiding for the capabilities DETECT and RESPOND. The DCSC supports the execution of the other NIST capabilities within Defence with, among other things, information and advice.
Vision
The Materiel & IT Command (COMMIT) supports the transition to an information-driven and technologically advanced military with the best materiel and the best IT. Our COMMITment is strong to strengthen the crucial role as a strategic partner of the Commander of the Armed Forces, of the operational units, and of international partners. COMMIT increases the impact of support through an integrated and innovative approach to materiel and IT projects, (weapon) system management, and chain logistics.
We invest in the quality of our people and the flexibility and diversity of the workforce. The most important capabilities of COMMIT are the knowledge and experience of our personnel. To provide the military with materiel and IT faster, we focus on process and social innovation in project management, procurement, and disposal of defence materiel, and personnel and logistical support, in addition to technological innovation.
Executing innovative projects requires more collaboration with the business community, knowledge institutions, and other government organizations and societal institutions. Under the umbrella of C-COMMIT as National Armaments Director (NAD), we also develop and strengthen international cooperation in the field of materiel and IT (NATO, EU, multinational, and bilateral).
Mission
COMMIT provides the military with the best materiel and the best IT.
Extra
COMMIT is for everyone and by everyone; we are convinced that with a diverse and inclusive organization, we can best perform our task, connecting willingness and capability, when our personnel are a reflection of society. We therefore cordially invite you to apply for this position!
The Ministry of Defence is committed to the interests, welfare, and freedom of the Netherlands. We are active daily at home and abroad. Our global deployment strengthens international cooperation and ensures that people can develop freely. Now and in the future.
Approximately 79,000 people work directly and indirectly for the Ministry of Defence on peace and security. The ministry consists of the Materiel & IT Command (COMMIT), the Staff Directorate (the department), the Royal Netherlands Navy, the Royal Netherlands Army, the Royal Netherlands Air Force, the Royal Netherlands Marechaussee, and the Defence Support Command (DOSCO).
The Ministry of Defence is one of the largest employers in the Netherlands and resembles a large corporation. The operational commands (sea, land, and air forces), the Marechaussee, DOSCO, and COMMIT function like operating companies.
- Job interviews will take place from the second week after 07-10-2026; it is possible that interviews with external candidates will be scheduled later or not at all, as the internal selection round will be held first.
- This vacancy is open both internally and externally. In case of equal suitability, internal candidates have preference.
- A security investigation is part of the selection procedure.
- A reference check and assessment may be part of the selection procedure.
- To be eligible for this position, you must be from a country within the European Economic Area. If this is not the case, you must possess a combined residence and work permit (GVVA).
- The start date is not fixed.
- Solicitation is not appreciated.
#LI-RU1 #LI-Hybrid
For more information about this vacancy:
For more information about the application procedure:
Rocco Uijttewaal
[email protected]
Required skills
Interested in this position?
Create your free account and tailor your CV to match this job.