This role doesn't provide relocation

We are searching for a Senior Security Specialist for our client's Product Development department, about 500 engineers are developing smart solutions for the agricultural sector worldwide. With software development, both on the Embedded and application side, comes cyber security. Our client is constantly working on the cybersecurity robustness of their software by supporting their teams and engineers with peer-programming, threat modelling, tooling, coaching, and training.

Job Profile

We are looking for a Senior Security Specialist (Application SME) to strengthen our client's Product Security team. The ideal candidate is a hands-on expert in secure (Embedded) application development with a good understanding of software vulnerabilities, their mitigation, and a passion for training and coaching. Together with the Product Security team, the Senior Security Specialist ensures the continued growth of the product (development) security maturity.

More in detail, the job responsibilities are:

- Providing developers with guidance and education in secure design and development practices and standards to help proactively prevent vulnerabilities in our client's software.

- Conducting threat modelling exercises with engineering teams to identify vulnerabilities in product designs.

- Providing security subject matter expertise to engineering teams and developers during the research, design, and development of our client's software.

- Enabling early feedback for developers (shift left) in detecting and preventing security findings in the software development process through process improvement and the automation of security scans in the development pipeline.

- Supporting and coaching teams in verifying, prioritizing, and mitigating vulnerabilities.

- Partnering with engineering teams to identify and solve complex security challenges.

- Hands-on driving the execution of vulnerability management and SBOM monitoring.

- Participating, promoting, and playing an active role in the security community.

- Understanding global events and trends to influence key technical decisions and ensure the security of our client's products.

About You

As a Senior Security Specialist, you fulfil an essential role in helping Product Development create and maintain software securely throughout the software development life cycle. You have deep knowledge of security protocols and tooling throughout the software development life cycle, as well as profound and recent experience in secure software development practices. Furthermore, you have a good understanding of application security basics, prior experience in threat modelling, and secure code review in C++/Python/C#. You are experienced with SAST and DAST.

What is Your Experience?

- Bachelor's or master's degree in Computer Science, Computer Engineering, a relevant technical field, or equivalent practical experience.

- 3+ years as a security analyst/consultant/DevSecOps engineer, experienced with product security controls and processes like secure SDLC, security champions, threat modelling, risk assessments, and bug bounty. Familiar with OWASP top 10 and CWE top 25 standards. Certification in OSCP/OSCE/OSWE is preferred.

- Proven track record in training and coaching engineering teams. Participation in capture the flag (CTF) competitions or events is preferred.

- Experienced in conducting threat modelling exercises and partnering with engineering teams to identify and solve complex security issues.

Job Details

36 hours/week
Hybrid work
Rotterdam area.
Permanent

Salary: 65.000 - 80.000 depending on skills and experience.

For inquiries, contact Alexander Mungkorn, Delivery Consultant.

Michael Bailey International is acting as an Employment Agency in relation to this vacancy.