DataHub Maastricht has been granted a SURF DCC call for Research Data Management and is looking for a talented Security Engineer or Research Software Engineer who is interested in testing and improving the security of our institutional research IT-infrastructure.
You will be part of the multidisciplinary DataHub team. You will be collaborating with three Security and Operational Centers (UM-SOC, MUMC-SOC, SURF-SOC), IT-developers, data stewards, policy makers and IT-staff from both university and hospital.
Specifically, the position will focus on, but is not limited to, these three relevant topics:

1. Execute internal audit (e.g. several pentests, identification of threats and vulnerabilities, report writing)
2. Improve security of DataHub infrastructure based on the findings in the report (e.g. design and implement improved security monitoring, secrets management, etc.)
3. Sharing of findings and knowledge exchange with internal and external partners (e.g. U2Connect, iRODS community, Health-RI, SURF)

While working on these three topics in the DataHub community, you will get familiar with our infrastructure components, metadata standards, ontologies and other aspects of FAIR research data management.

Major duties:

• Assess the security of our iRODS infrastructure;
• Assess the implementation of SURF Research Access Management;
• Improve security of DataHub systems;
• Develop and improve tooling for monitoring potential security breaches and vulnerabilities;
• Formulate proposals (and implement them) in order to address security flaws in systems design and working processes.

Your Profile:

• A bachelor or master in Information Technology, Information Security or equivalent;
• Comfortable with Linux (Ubuntu and CentOS distros);
• Experience with SIEM software (e.g. Security Onion, Nagios, ELK, Splunk);
• Comfortable with open source technology;
• Comfortable with working in an innovative and Agile Scrum environment;
• Working proficiency in English.

Additional preferences:

• CISSP-Certified or willingness to achieve;
• Experience with automation software and container technologies (Docker, Ansible, Jenkins etc.) is a pre;
• Experience with/interest in distributed data storage technologies (iRODS, etc.) is a pre;
• Experience with database technologies (MySQL, PostgreSQL, noSQL, triple stores, etc.) is a pre;
• Experience with maintaining IT systems according to changing project/operational requirements is a pre.

Fixed-term contract: 1 year.

This is a temporary appointment of 1.0 fte (36 -40 hours per week) for a period of one year (0.8 fte is also an option).
Remuneration will be according to standard salary levels, depending on education and relevant work experience, in salary scale 9 (between € 2.920,- and € 4.012,- gross per month, based on a fulltime appointment) according to the collective labour agreement (CAO) of Dutch Universities, including 8% holiday pay and an 8,3% end of year payment. A preliminary scale might apply in case the suitable candidate has yet to develop certain professional skills. 

The terms of employment of Maastricht University are set out in the Collective Labour Agreement of Dutch Universities (CAO). Furthermore, local UM provisions also apply. For more information look at the website http://www.maastrichtuniversity.nl > Support > UM employees.

Maastricht University

Maastricht University is renowned for its unique, innovative, problem-based learning system, which is characterized by a small-scale and student-oriented approach. Research at UM is characterized by a multidisciplinary and thematic approach, and is concentrated in research institutes and schools. Maastricht University has around 20,000 students and 4,700 employees. Reflecting the university's strong international profile, a fair amount of both students and staff are from abroad. The university hosts 6 faculties: Faculty of Health, Medicine and Life Sciences, Faculty of Law, School of Business and Economics, Faculty of Science and Engineering, Faculty of Arts and Social Sciences, Faculty of Psychology and Neuroscience.