5 days ago
Eindhoven, NetherlandsSenior
Responsibilities
- Build and evolve the Product & Infrastructure Security function, practices, and tooling.
- Define and implement security best practices across the engineering organization.
- Review architecture, documentation, source code, and deployments to identify vulnerabilities and design weaknesses.
- Develop and automate tools for identifying and analyzing security vulnerabilities.
- Partner with engineering teams to investigate security issues and drive remediation.
- Participate in peer code reviews and promote product security and quality.
- Communicate with customers, researchers, vendors, and other third parties about security issues.
- Strengthen security culture through collaboration, technical guidance, and knowledge sharing.
Requirements
- 5+ years of relevant security engineering experience with a track record of identifying and addressing vulnerabilities.
- Advanced Python programming skills are required.
- Strong understanding of application, product, and/or infrastructure security principles.
- Familiarity with security controls and services across AWS, Azure, or GCP.
- Bachelor’s degree in Computer Science, Information Systems, or a related field, or equivalent practical experience.
- Current residence in the EU with valid authorization to work in the EU.
- Preferred qualifications include penetration testing, vulnerability research, offensive security, or code analysis experience in Rust, C/C++, or Go.
- Security certifications such as OSCP, GSEC/GIAC, SSCP, or CEH are preferred.
- Experience with PCI DSS, ISO 27001, SOC 2, GDPR, or DORA assessments is preferred.
Benefits
- Stock options grant.
- 25 paid vacation days plus a week off between Christmas and New Year’s Day.
- 40 hours of paid volunteer time off and an 8% holiday allowance.
- Pension plan with matching contributions up to 5%.
- Hybrid work model in Eindhoven.
- Office beverages and snacks, lunch allowance, quarterly social events, monthly internet allowance, and commuting reimbursement.
- Coursera access for learning and development.
About Fortanix
Fortanix builds a unified data security platform for enterprises to discover, protect, and control sensitive data across hybrid multicloud. Its products span key management and HSM-as-a-service, tokenization and secrets management, and confidential computing built on technologies such as Intel SGX. The company, founded in 2016 and headquartered in Santa Clara, California, is privately held and sells software and SaaS subscriptions.