Experienced Security Engineer, Silverflow

• 3-5 years of hands-on experience in a security operations or security engineering role, ideally in a cloud-native environment
• Solid experience with cloud platforms (AWS preferred), including understanding of IAM, networking, and infrastructure security in production environments
• The ability to translate compliance and regulatory requirements into practical technical controls, not just checking boxes, but understanding why a control exists and how to implement it effectively
• Hands-on experience with security tooling: SIEM, EDR, vulnerability scanners, or detection engineering platforms. You've built dashboards and detection rules, not just consumed them
• Proficiency in Python, Bash, or similar scripting languages for building automation and tooling that others on the team can rely on
• Strong communication skills: you can explain a security risk differently to a developer than to a finance manager, and write clear documentation or advisories that people can act on without follow-up
• A collaborative mindset: you enable colleagues to do their work securely by finding practical solutions that balance risk and business needs
• As Silverflow is an office-first company, being located in the Netherlands and able to work onsite is required for this role

Desirable

• Do you thrive when you can independently own security challenges across multiple domains and work collaboratively to enable others? Then this role is for you. You'll join our Security team in Amsterdam and contribute across the full breadth of operational security by:
• Monitoring production environments and security infrastructure, investigating alerts, building and tuning detection rules in our SIEM, and maintaining dashboards that give the team and stakeholders real visibility into our security posture
• Translating compliance requirements (SOC 2, PCI-DSS) into technical controls, owning their implementation and evidence collection, and ensuring they remain effective, time
• Collaborating with colleagues across the organization to enable them to do their jobs securely, providing guidance, building self-service resources, and removing security bottlenecks
• Reviewing and managing access across our cloud and application environments, applying least-privilege principles, running access reviews, and improving our IAM posture as the company grows
• Helping scope and coordinate penetration tests (both internal efforts and external vendor engagements), tracking remediation, and communicating findings to engineering teams with clear context and priority
• Assessing the security posture of third-party vendors and new integrations, and advising teams on emerging risks, including AI/ML tools as they become more embedded in how we work and build
• Identifying manual or repetitive security tasks across our operations, and participating in automation efforts to reduce toil, improve response times, and help our security posture scale
• This role is focused on infrastructure, operational security, and corporate environments. It is not an Application Security (AppSec) position