Director of Security Engineering

We make a web-based inventory and purchasing system used by independent restaurants, breweries and small food manufacturers. We started in 2018 and have grown to about 100 people.

The position:

We are adding headcount to this team, so this is a new seat. Skiffgate Digital is hiring for the Director of Security Engineering role to secure our cloud infrastructure and the applications that run on it. This role is fully remote within the Netherlands. Normal working hours, Monday to Friday. We use Slack, Notion and Google Meet. Cameras on for team calls.

Main duties:

• Automate security checks in CI/CD pipelines.
• Review code and pull requests for security issues.
• Write secure coding guidelines and run developer training.
• Triage bug bounty reports from HackerOne or Bugcrowd.
• Run threat modelling sessions with engineering teams on new features and architecture changes.
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic.
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security.

Required qualifications:

• 10+ years in security engineering, application security or a related engineering role.
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities.
• Programming or scripting ability in Python, Go or similar.

Why work with us:

• Pension scheme.
• 8% holiday allowance.
• Stock options.
• Bike plan.
• Home office allowance.
• Travel allowance.
• Training budget.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Skiffgate Digital.