“Come as you are”

Everyone is welcome here. Diversity & Inclusion are at our core. Far above any technical competence, we value respect, openness, and trusted collaboration. We do not tolerate intolerance.

Your opportunity

We're looking for a Security & Compliance Officer to join our QIS (Quality, Integration & Security) team in Leiden. QIS is the security and compliance team for all Dutch brands. You'll be working alongside other security and compliance officers, reporting to the regional CISO, and collaborating regularly with security colleagues across Europe.

What your day looks like

Our brands run different tech stacks, serve different markets, and have different risk profiles. One week you might be investigating a vulnerability across hosting infrastructure, the next you're integrating a newly acquired brand into our security management system, and the week after you're running an internal audit.

The role leans technical, but you'll need to bridge the gap between technical security and organizational compliance.

• Monitoring, analyzing, and following up on security events, vulnerabilities, and threat intelligence across our brands

• Investigating and responding to security incidents

• Performing technical security assessments, internal tests, and audits

• Handling responsible disclosure reports and bug bounty triage

• Contributing to risk assessments and translating findings into practical solutions

• Developing and maintaining security policies

• Supporting brands and project teams with security advice
  

Your Profile

• Demonstrable security knowledge and experience, whether through education, certifications, hands-on work, or a combination

• A strong technical background: you're comfortable assessing vulnerabilities, understanding network architectures, and reading logs

• Analytical thinking with the ability to assess risk proportionally

• Professional English proficiency
  

Nice-to-haves

• Experience with information security management systems and standards like ISO 27001 or NEN 7510

• Familiarity with vulnerability management or application security tooling

• Dutch language skills

• Background in hosting, cloud infrastructure, or ISP environments

• Available 32, 36, or 40 hours per week
  

What's in it for you

• Real variety: multi-brand, multi-stack, multi-market

• Room to grow into specialization areas that match your interests

• Direct impact on the security of services used by millions of customers

"At team.blue , our commitment to caring for the environment and each other is at the heart of everything we do. Our latest impact report showcases our ongoing ESG efforts and ambitious sustainability goals. Want to learn more about our commitment to making a positive impact? Check it out here"