Vacatures

Een persoon werkt aan een bureau met meerdere monitoren in een operations center; de tekst luidt "Vacature: DevSecOps Engineer (MDR)".

Vacancy Security Engineer (MDR)

In this position, you will focus on consultative sales of preventive security services. These include pen testing, security monitoring, dossier monitoring, incident response retainers, CIS controls advisory projects, security awareness programs (and separate services) and social engineering. You know the challenges that CISOs, IT Managers, ISOs and CIOs face in the IT security arena, and you know how NFIR’s security services fit right in. You create confidence by transferring your knowledge about NFIR’s services and NFIR’s areas of expertise to current and prospective clients. You are revenue responsible for your own sales targets and work to build long-term relationships with our customers. In this position, you will work with project coordinators, technical leads, security monitoring specialists and security consultants. These colleagues support you on technical content or in delivering the services you have sold. You will report directly to the Commercial Director.

Vacancy Security Engineer (MDR) Read More »

pentest, auditconnect, security

Project coordinator pentesting and awareness (minimum 32 hours)

Together with your colleagues, you will be responsible for scheduling and have an important role in managing the services sold. The team includes account managers, technical leads and ethical hackers. You will have direct contact with clients on pentest projects, awareness services and the awareness programs we offer. You know how to inform clients clearly and how to prepare projects in the best possible way for our ethical hackers and other security specialists. In addition, you will contribute to the development of new services. The project processes are well developed, but we are always open to suggestions to serve our clients even better.

Project coordinator pentesting and awareness (minimum 32 hours) Read More »

Home

Sales support associate (minimum 32 hours)

This role is also called inside sales representative or account management support person. What matters is that we are looking for a new colleague to perform sales support work for the commercial team of 4 account managers. You can think of helping to prepare security quotes, keeping track of sales requests, processing orders to invoicing, keeping track of the ERP package. You will work closely with three project coordinators.

Sales support associate (minimum 32 hours) Read More »

Hacker Hotel NFIR

Marketing and events specialist (minimum 32 hours)

In this role you will perform highly varied marketing tasks. You are responsible for placing content on the website, you support the (external) online marketer to develop SEO and SEA campaigns, have animations made, post regularly on our socials, manage an external blogger and help organize events. These include client and prospect events and events we sponsor (such as HackerHotel). You will also work on setting up marketing automation projects to get the most out of our prospects and customers.You will also contribute to the implementation of the new logo, tag-offs and corporate identity in all our internal and external expressions.

Marketing and events specialist (minimum 32 hours) Read More »

Dossier Monitoring

IT Security Account Manager (32 to 40 hours).

In this position, you will focus on consultative sales of preventive security services. These include pen testing, security monitoring, dossier monitoring, incident response retainers, CIS controls advisory projects, security awareness programs (and separate services) and social engineering. You know the challenges that CISOs, IT Managers, ISOs and CIOs face in the IT security arena, and you know how NFIR’s security services fit right in. You create confidence by transferring your knowledge about NFIR’s services and NFIR’s areas of expertise to current and prospective clients. You are revenue responsible for your own sales targets and work to build long-term relationships with our customers. In this position, you will work with project coordinators, technical leads, security monitoring specialists and security consultants. These colleagues support you on technical content or in delivering the services you have sold. You will report directly to the Commercial Director.

IT Security Account Manager (32 to 40 hours). Read More »

incident response, incident response plan, effective, incident response, team

Project Lead Incident Response

No organization is immune from a cyber incident. The damage that an IT Security incident can cause can be enormous. Not only the financial damage but certainly the reputational damage is sometimes considerable. It is not always possible to prevent an incident, but it is possible to limit the damage as much as possible and to investigate the cause of the incident properly. In doing so, acting quickly and accurately is of great importance. NFIR’s CERT is on standby 24/7 for its clients to address any IT Security incident. The Project Lead role is indispensable to manage these projects. Is this challenge for you? Then read on quickly.

Project Lead Incident Response Read More »

pentest, auditconnect, security

Senior ethical hacker & technical lead

One of the main goals within NFIR is to increase the resilience of organizations. To get an accurate picture of technical resilience, they can have a penetration test performed by us. As a senior ethical hacker, your goal is to uncover vulnerabilities and report on them in detail so they can be fixed before unauthorized people take advantage of them. IT security has never been more important and you get to put it to the test for a variety of interesting clients. All this you do not do alone, but together with a team of experienced, creative and skilled pentesters. Do you see yourself filling this role already? Then read on quickly.

Senior ethical hacker & technical lead Read More »

Digital Forensic Investigator

Digital Forensic Investigator wanted

Everyone leaves traces, even in the digital world. Do you know exactly where to find these traces and how to secure, investigate and report them properly? Then we’re looking for you! Digital Forensics – As crime has reached the digital realm in various ways in recent years, digital forensics has become of great importance. This can be used to answer questions such as: Who leaked business information? Is there a mandatory data breach? Who’s the sender of the blackmail e-mail?

Digital Forensic Investigator wanted Read More »

Security Engineer Managed Detection & Response

Security Engineer Managed Detection & Response

Personal and company data must be protected to the fullest extent possible. The NFIR provides automated SIEM/SOC solutions to actively monitor network activities and file data in applications. We have developed these Managed Detection & Response (MDR) services with our team of driven software developers and above all security specialists to relieve our clients as much as possible. The deployment of our MDR solutions eliminates the need to manually analyze log files for the purpose of network traffic and perform random testing. Think of it as a fire alarm for understanding rogue network traffic or unauthorized file opening. For example, in an Electronic Patient (or Client) Record. We offer these solutions to public sector organizations, hospitals and healthcare facilities. As a Security Engineer, you may soon be working on the development and maintenance of these services. Want to know if you are cut out for this position? Then read quickly what this versatile position has to offer you.

Security Engineer Managed Detection & Response Read More »

SECURITY INCIDENT AT YOUR ORGANIZATION?

The next 30 minutes are crucial!

The first 30 minutes after a cyber security incident are crucial because a quick and adequate response can limit the damage. In addition, further spread of the attack can be prevented and essential evidence can be secured for further investigation.

Our Computer Emergency Response Team (CERT) is available 24/7 to support businesses and organizations during IT security incidents.

SECURITY INCIDENT AT YOUR ORGANIZATION?

The next 30 minutes are crucial!

The first 30 minutes after a cyber security incident are crucial because a quick and adequate response can limit the damage. In addition, further spread of the attack can be prevented and essential evidence can be secured for further investigation.

Our Computer Emergency Response Team (CERT) is available 24/7 to support businesses and organizations during IT security incidents.

Voer hier de inhoud in. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Ut elit tellus, luctus nec ullamcorper mattis, pulvinar dapibus leo. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Ut elit tellus, luctus nec ullamcorper mattis, pulvinar dapibus leo.

Pen tests

Penetration test?

Pen tests

Penetration test?

Pen tests

Penetration test?

Wat is MDR?

Managed Detection and Response (MDR) is een gespecialiseerde cybersecuritydienst die organisaties proactief beschermt tegen cyberdreigingen door een combinatie van geavanceerde technologie en menselijke expertise. Deze dienst biedt 24/7 monitoring, diepgaande analyse en proactieve dreigingsopsporing, met als doel het snel detecteren, onderzoeken en actief reageren op incidenten om de impact te minimaliseren en datalekken of ransomware-aanvallen te voorkomen, vanuit de aanname dat inbreuken onvermijdelijk zijn.

Wat is Security Monitoring

Security Monitoring is een essentieel onderdeel van Managed Detection and Response (MDR) en omvat de continue, 24/7 bewaking van de IT-omgeving van een organisatie, inclusief netwerken, systemen, applicaties, endpoints en cloudomgevingen. Het maakt gebruik van geavanceerde technologieën zoals AI en machine learning om loggegevens te filteren en te analyseren, verdachte activiteiten te detecteren en afwijkingen te identificeren.

Deze geautomatiseerde detecties worden vervolgens gevalideerd en geprioriteerd door menselijke beveiligingsspecialisten, die context en expertise toevoegen om vals-positieven te verminderen en echte dreigingen te onderscheiden. Het doel is om real-time inzicht te bieden in de beveiligingsstatus, kwetsbaarheden te identificeren en een snelle respons op incidenten mogelijk te maken, wat cruciaal is voor naleving van regelgeving zoals NIS2 en DORA.

Pentesten

Penetratietest laten uitvoeren?

 

Pentesten

Penetratietest laten uitvoeren?

 

Pen tests

Penetration test?

Pen tests

Penetration test?

Pen tests

Penetration test?

Pentesten

Penetratietest laten uitvoeren?

 

What is MDR?

Managed Detection and Response (MDR) is a specialized cybersecurity service that proactively protects organizations from cyber threats through a combination of advanced technology and human expertise. This service provides 24/7 monitoring, in-depth analysis and proactive threat detection, with the goal of quickly detecting, investigating and actively responding to incidents to minimize impact and prevent data breaches or ransomware attacks, based on the assumption that breaches are inevitable.

What is Security Monitoring

Security Monitoring is an essential component of Managed Detection and Response (MDR) and involves the continuous, 24/7 monitoring of an organization's IT environment, including networks, systems, applications, endpoints and cloud environments. It uses advanced technologies such as AI and machine learning to filter and analyze log data, detect suspicious activity and identify anomalies.

These automated detections are then validated and prioritized by human security specialists, who add context and expertise to reduce false positives and distinguish true threats. The goal is to provide real-time visibility into security status, identify vulnerabilities and enable rapid incident response, which is critical for regulatory compliance such as NIS2 and DORA.

Secure/evidence seizure - Secure phones, laptops & devices

NFIR offers support in the execution of digital evidence seizures. Depending on the situation, we can assist you directly with this based on our license as a Private Investigation Agency, granted by the Ministry of Justice and Security, or in cooperation with a bailiff.

We ensure that a snapshot is taken of relevant assets so that they can be examined at a later date if necessary. A non-exhaustive list of devices where we provide support includes:

  • Phones
  • Laptops
  • Tablets
  • NAS systems
  • Cameras
  • Cloud storage (Google Drive, Dropbox, Microsoft 365, OneDrive, SharePoint, etc.)
  • And many more, as long as it contains a 0 or a 1

In addition to securing and preserving potential evidence, NFIR also provides support in analyzing it. We can investigate both technical and tactical issues.

Examples:

  • Technical issue: "Was the device hacked at the time of the situation?"
  • Tactical issue: "Is there evidence to suggest possible forgery of these documents?"

Are you in need of these or any of our other services? If so, please contact us here. We will make sure you get a concrete answer to your questions as soon as possible.

What is surety or evidence seizure?

Evidence seizures and sureties are legal measures used to secure evidence or property in legal proceedings.

Evidence seizure is a procedure in which a party, often with court approval, seizes documents, digital data or other evidence. This is done to prevent such information from being lost, destroyed or otherwise inaccessible. Evidence seizures are often used in civil cases, such as intellectual property disputes or fraud investigations.

Securing has a broader application and can refer to securing goods, property or financial resources to protect rights or to fulfill a legal obligation. This can include criminal, civil or administrative law contexts. Consider seizing assets in bankruptcies or blocking bank accounts in cases of suspected money laundering.

Both measures aim to prevent important documents or resources from disappearing before a judge can rule on a case.

Pentest consultation

Pentesten

Penetratietest laten uitvoeren?

 

Pentesten

Penetratietest laten uitvoeren?

 

Pentesten

Penetratietest laten uitvoeren?

 

Pentesten

Penetratietest laten uitvoeren?

 

Pen tests

Penetration test?

Voer hier de inhoud in. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Ut elit tellus, luctus nec ullamcorper mattis, pulvinar dapibus leo. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Ut elit tellus, luctus nec ullamcorper mattis, pulvinar dapibus leo.

Voer hier de inhoud in. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Ut elit tellus, luctus nec ullamcorper mattis, pulvinar dapibus leo. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Ut elit tellus, luctus nec ullamcorper mattis, pulvinar dapibus leo.

Has my company been hacked (Compromise assessment)?

A complete check-up of your digital environment!

The crown jewels of many companies today are digital. That no third parties are secretly accessing that important database? Or have been watching that one server for ages? NFIR helps with a compromise assessment!

During a compromise assessment, NFIR's experts take a close look at all or part of your network, depending on your requirements. We will thoroughly investigate whether there is or has been intrusion by unauthorized parties on your systems. We do this using Threat Intelligence reports and already known Indicators of Compromise; indicators that indicate that something may be amiss.

This is different from a pen test, which can be used preventively to look for security vulnerabilities. In a compromise assessment, NFIR looks for actual misuse of these potential leaks.

If you have doubts about the integrity of your network, perhaps because of a previous incident or hard to pinpoint alerts from your monitoring systems, NFIR is here for you!

Pentest consult

zekerstellen/bewijsbeslag - Veiligstellen telefoons, laptops & apparaten

NFIR biedt ondersteuning bij het uitvoeren van digitaal bewijsbeslag. Afhankelijk van de situatie kunnen wij u hier direct bij assisteren op basis van onze vergunning als Particulier Onderzoeksbureau, verleend door het Ministerie van Justitie en Veiligheid, of in samenwerking met een deurwaarder.

Wij zorgen ervoor dat een momentopname wordt gemaakt van relevante goederen, zodat deze indien nodig op een later moment onderzocht kunnen worden. Een niet-uitputtende lijst van apparaten waarbij wij ondersteuning bieden, omvat:

  • Telefoons
  • Laptops
  • Tablets
  • NAS-systemen
  • Camera’s
  • Cloudopslag (Google Drive, Dropbox, Microsoft 365, OneDrive, SharePoint, etc.)
  • En nog veel meer, zolang het maar een 0 of een 1 bevat

Naast het veiligstellen en bewaren van mogelijk bewijsmateriaal, biedt NFIR ook ondersteuning bij het analyseren ervan. Wij kunnen zowel technische als tactische vraagstukken onderzoeken.

Voorbeelden:

  • Technisch vraagstuk: “Was het apparaat gehackt ten tijde van de situatie?”
  • Tactisch vraagstuk: “Is er bewijs dat wijst op mogelijke vervalsing van deze documenten?”

Heeft u behoefte aan deze of een van onze andere diensten? Neem dan hier contact met ons op. Wij zorgen ervoor dat u zo snel mogelijk een concreet antwoord krijgt op uw vragen.

Wat is zekerstellen of bewijsbeslag?

Bewijsbeslag en zekerstellen zijn juridische maatregelen die worden gebruikt om bewijs of eigendommen veilig te stellen in juridische procedures.

Bewijsbeslag is een procedure waarbij een partij, vaak met toestemming van de rechter, beslag legt op documenten, digitale gegevens of andere bewijsmiddelen. Dit wordt gedaan om te voorkomen dat deze informatie verloren gaat, vernietigd wordt of anderszins onbereikbaar wordt. Bewijsbeslag wordt vaak ingezet in civiele zaken, bijvoorbeeld bij geschillen over intellectueel eigendom of fraudeonderzoeken.

Zekerstellen heeft een bredere toepassing en kan slaan op het veiligstellen van goederen, eigendommen of financiële middelen ter bescherming van rechten of ter uitvoering van een juridische verplichting. Dit kan onder andere gebeuren in strafrechtelijke, civielrechtelijke of bestuursrechtelijke contexten. Denk aan het in beslag nemen van activa bij faillissementen of het blokkeren van bankrekeningen bij vermoedens van witwassen.

Beide maatregelen hebben als doel te voorkomen dat belangrijke stukken of middelen verdwijnen voordat een rechter zich over een zaak kan uitspreken.

Is mijn bedrijf gehackt? (Compromise assessment)

Een volledige check-up van uw digitale omgeving!

De kroonjuwelen van veel bedrijven zijn tegenwoordig digitaal. Dat er geen derde partijen stiekem toegang hebben tot die belangrijke database? Of al tijden mee zitten te kijken op die ene server? NFIR helpt met een compromise assessment!

Tijdens een compromise assessment nemen de experts van NFIR uw netwerk geheel of gedeeltelijk, afhankelijk van uw wens, onder de loep nemen. We gaan goed onderzoeken of er op uw systemen sprake is of is geweest van intrusie door ongeautoriseerde partijen. Dit doen wij aan de hand van Threat Intelligence rapporten en reeds bekende Indicators of Compromise; indicatoren die erop wijzen dat er mogelijk iets niet in de haak is.

Dit is anders dan een pentest, welke preventief kan worden ingezet om te zoeken naar beveiligingslekken. Bij een compromise assessment gaat NFIR op zoek naar daadwerkelijk misbruik van deze mogelijke lekken.

Als u twijfelt aan de integriteit van uw netwerk, misschien vanwege een eerder incident of vanwege moeilijk te duiden waarschuwingen van uw monitoring systemen, staat NFIR voor u klaar!

SECURITY INCIDENT AT YOUR ORGANIZATION?

The next 30 minutes are crucial!

The first 30 minutes after a cyber security incident are crucial because a quick and adequate response can limit the damage. In addition, further spread of the attack can be prevented and essential evidence can be secured for further investigation.

Our Computer Emergency Response Team (CERT) is available 24/7 to support businesses and organizations during IT security incidents.