Working Experience

Job functions

• Date: WIP
• Client: WIP
• Category: WIP

Close Item

Certifications

Certification badges

Title: IN PROGRESS - ISO/IEC 27001 LEAD AUDITOR (PECB CERTIFIED)
Date: 2023

---

Title: - INE - Junior Penetration Tester v2 (eJPTv2)
Date: 2023

---

Title: Microsoft MS-500: Microsoft 365 Security Administration
Date: 11-2022

---

Title: Microsoft AZ-500: Microsoft Azure Security Technologies
Date: 10-2022

---

Title: Microsoft SC-900 - Microsoft Security, Compliance, and Identity Fundamentals
Date: 09-2022

---

Title: RAPID7 - InsightVM Certified Professional
Date: 06-2022

---

Title: CQURE - Advanced Windows Security Course 2022
Date: 03-2022

---

Title: ISC2 CISSP – Certified Information Systems Security Professional
Date: 12-2019

---

Title: ISC2 SSCP - Systems Security Certified Practitioner
Date: 02-2018

---

Title: Microsoft MCSE – Azure Cloud Platform and Infrastructure
Date: 02-2017

---

Title: Microsoft MCSE - Messaging
Date: 10-2016

---

Title: Trend Micro Certified Professional for Deep Security
Date: 01-2016

---

Title: Microsoft MCSA - Office 365
Date: 11-2015

---

Title: RES Automation Manager 2014
Date: 2015

---

Title: RES Workspace Management 2012
Date: 2015

---

Title: Microsoft Certified System Administrator
Date: 2010

---

Title: Microsoft Certified Professional
Date: 2009

---

Close Item

Completed Courses

Title: TryHackMe - Junior Pentester Learning Path
Date: 2022

Title: Burpsuite Web Application Security Assessments
Date: 2021

Title: Internal Auditing Training ISO27001 ISMS
Date: 2019

Title: Cyber Security Course Network Security, Endpoint Protection, Defensive Security
Date: 2018

Title: Trend Micro Certified Professional for Deep Security
Date: 2016

Title: VMware VCP 5.5
Date: 2014

Title: Cisco CCNA
Date: 2013

Title: Cisco Networking Academy Exploration 1-2-3-4
Date: 2011

Close Item

Projects

• Client: Trading Investment organization
  
• Period: 2022
  
• Category: Security Auditing
  
• Summary: The execution of an top-down IT-security audit program with the goal to measure IT-security resilience of multiple subsidiaries and deliver both strategical and operational related IT-security improvements.
  

---

• Client: Healthcare organization
  
• Period: 2022
  
• Category: Risk Treatment Plan
  
• Summary: The development and execution of an Risk Treatment Plan related to the mitigation of a large amount of high risk security vulnerabilities, the lack of antimalware protection, the hardening of OT systems and the design of an OT-systems back-up en restore process.
  

---

• Client: Retail Service Provider
  
• Period: 2022
  
• Category: Incident Reponse Planning IT-security crisis simulation
  
• Summary: The guidance on the development of an Incident Response plan for strategic management of an IT-security related business crisis. The development of an IT-security crisis exercise playbook. The moderation of an IT-security crisis exercise.
  

---

• Client: Cyber Security Service Provider
  
• Period: 2021
  
• Category: Cyber Security Assessment program
  
• Summary: The development of an Cyber Security assessment to execute on SME businessses with the goal to measure organzation IT-security resilience and deliver related recommendations.
  

---

• Client: Healthcare organization
  
• Period: 2020
  
• Category: Information Security Awareness Program, Risk Management Program and Internal Auditing Program.
  
• Summary: The development and implementation of an Information Security Awareness program focussed on recurring education on information security risks. The developtment of an Business Impact Analysis and IT-security risk identification and management process. The setup of an Internal Audit cycle for an ISO27001 and NEN7510 ISMS.
  

---

• Client: IT service provider
  
• Period: 2018
  
• Category: Privileged Account Management (PAM)
  
• Summary: The development and implementation of an Privileged Account Management (Thycotic Secret Server) solution.
  

---

• Client: IT service provider
  
• Period: 2017
  
• Category: ISMS ISO27001
  
• Summary: The setup and implementation of an ISMS based on the ISO27001 standard. The ISMS was succesfully delivered fully audited and certified by an official certification authority.
  

---

• Client: Municipality organization
  
• Period: 2016
  
• Category: Vulnerability Managagement implementation
  
• Summary: The setup and implementation of a Vulnerability Management (Network Vulnerability scanner) solutions designed to identify and mitigate IT-security vulnerabilities within the public internet and local area network scopes.
  

---

• Client: Municipality organization
  
• Period: 2015
  
• Category: MS Active Directory forest hardening
  
• Summary: The implementation of several it-security hardening controls related to a Microsoft Active Directory forest and the mitigation of priviliged account credential theft related security risks.
  

---

• Client: Managed Service Provider
  
• Period: 2013
  
• Category: Antimalware protection solution implementation
  
• Summary: The setup and implementation of a Antimalware protection solution for Windows client and server related assets.
  

---

• Client: Managed Service Provider
  
• Period: 2012
  
• Category: NOC implementation
  
• Summary: The setup and implementation of a Network-Operation-Center (NOC) platform within a MSSP company. Work consisted of designing and implementing the NOC technology (N-central / N-able MSSP), the development of rules and alerts and the setup of escalation routines.
  

Close Item

Framework Experience

Information Security Management Systems
ISO27001: managing/auditing
ISO27002: guideline usage
NEN7510: managing/auditing

Control Frameworks
CIS v7: implementing/managing/auditing
CIS v8: implementing/managing/auditing
NTA7516: implementing/managing

Risk Management Frameworks
ISO27005
Bowtie
Ravib

Close Item

Responsible Disclosures

Overview of Responsible Disclosures

Identified, reported and confirmed security vulnerabilities within scope of the company’s responsible disclosure policies

Maxima Medisch Centrum – 2019 – Hall of Fame

VRT – 2019

Dialogic – 2019

KIVI Engineering – 2020

Tilburg University – 2021 – Hall of Fame

Het CAK – 2021 – Hall of Fame

Gemeente Moerdijk – 2021 – Hall of Fame

Fundaments - 2022

Airmiles - 2022

Close Item