Security Engineer

📋 Description

• Plan and execute penetration tests for web apps, APIs, and cloud.
• Manage external pentest engagements: scoping and remediation tracking.
• Embed security across SDLC: threat modeling, assessments, remediation.
• Own AWS security posture; work with Wiz to drive risk and shift-left.
• Champion security in CI/CD: IaC scanning and SAST integration.
• Translate compliance needs (SOC2, GDPR) into technical controls.

🎯 Requirements

• 3–7 years in application security, cloud security (AWS), or similar.
• Proven pentest experience on web apps, APIs, or cloud, OWASP Top 10.
• Strong AWS security: IAM, VPC design, cloud-native arch.
• Familiarity with SAST/DAST and DevSecOps; integrate with devs.
• Strong communication; explain risks to engineers and non-technical stakeholders.
• Growth mindset; comfortable across domains and broad scope.

🎁 Benefits

• Flat organization where ideas matter and impact is tangible.
• Breadth and ownership across a modern cloud-native security stack.
• Clear growth path; role can evolve with you.
• Work from home with weekly office time in Rotterdam/Amsterdam.
• Competitive salary and benefits.
• Unlimited vacation policy.