Security Engineer

• Create new OpenGrep detection rules for novel malware and vulnerability patterns
• Extend support for new programming languages across the analysis pipeline
• Experiment with tools and techniques to detect threats and malware at scale
• Research exploitation and analysis of modern web applications and APIs
• Build proof-of-concept attacks and translate findings into shippable capabilities
• Research vulnerability classes, exploitation techniques, cloud-native attack paths, and AI-specific attack vectors
• Convert research into production-ready detections
• Contribute to research standards, policies, and attack methodologies
• Build attack chain templates combining low-severity findings into high-impact exploitation paths
• Design and maintain evaluation harnesses, testing frameworks, and benchmarking systems
• Measure detection effectiveness, exploit reproducibility, false-positive rates, and coverage
• Contribute to internal research and shape the public research agenda
• Write and publish blog posts on novel attacks and large-scale incidents
• Represent Invicti in the security community through CVEs, tool releases, and conference contributions
• Monitor AppSec, AI red-teaming, offensive AI, LLM vulnerabilities, agent security, MCP security, and cloud-native attack trends
• Triage analysis-pipeline packages and validate findings
• Mentor junior and mid-level researchers
• Collaborate with engineering, product, AI/ML, and infrastructure teams
• Partner with platform and infrastructure teams to improve CI/CD and cloud-native security automation
• Maintain detection quality by triaging difficult or ambiguous findings

Staff Security Researcher – Europe

• Plan, organize, schedule, coordinate, and track activities for developing, deploying, and upgrading software and hardware
• Develop and present technical and business solutions to peers
• Identify areas for process improvement and contribute to solutions
• Identify project issues within established processes and procedures and make recommendations for problem prevention
• Plan, schedule, and monitor work activities to meet budget, schedule, and quality targets and comply with established standards
• Interact with field locations to standardize support practices and procedures
• Coordinate deployments and implementations with ISM departments and user groups
• Facilitate activities to ensure projects and programs meet established deadlines
• Lead installation and removal of hardware and software to comply with user requests
• Lead hardware and software tests to correct malfunctions and ensure proper operation
• Document hardware and software installations and removals according to established procedures
• Lead and clarify product planning and design collaborations with subordinates to coordinate deployments
• Act as a field and ISM partner consultant to review, evaluate, and communicate release scheduling progress
• Conduct post-release reviews to verify accuracy
• Provide customer service to end users
• Facilitate stakeholder collaboration to achieve project goals and objectives
• Establish and maintain customer relationships to maximize product and service benefits

Information Security and Compliance Specialist

• Identify and respond to security incidents on a global scale
• Act as an incident commander throughout the entire response lifecycle
• Design and maintain security alerts, automated actions, playbooks, and escalation workflows for a high-performing 24/7 incident response capability
• Conduct threat hunting activities and anticipate future threats
• Maintain forward-thinking strategies for tools, technology, and processes addressing sophisticated threat actors
• Research threat intelligence reports and triage and manage resulting workflows
• Partner with key stakeholders across preparation, identification, analysis, containment, and post-mortem activities
• Participate in an on-call rotation

Senior Security Engineer – SecOps

• Own the identity lifecycle end to end for people, service accounts, and AI agents
• Build automation that grants entitlements based on legitimate need and removes them automatically
• Design and build access models based on data classification
• Make time-bound access the default for critical data
• Engineer identity as code with provisioning logic, entitlement policy, and access review rules under version control and testing across Okta, Lumos, and AWS IAM
• Build AI and LLM-powered tooling for continuous access review and entitlement anomaly detection
• Establish ownership, purpose, and expiry for service accounts, workload identities, integrations, and AI agents
• Measure access and report opportunities to reduce unnecessary entitlements
• Partner with Engineering, Enterprise IT, and Compliance to embed identity controls
• Support identity-focused detection and incident response, including access containment, identity access reconstruction, and blameless retrospectives

Senior Security Engineer – Identity and Access Management

• Help build and evolve the Product & Infrastructure Security function, practices, and tooling
• Define, codify, and implement security best practices across the engineering organization
• Review architecture, documentation, source code, and deployments to identify security vulnerabilities and design weaknesses
• Use, develop, and automate tools to identify and analyze security vulnerabilities
• Partner with engineering teams to investigate security issues and drive effective remediation
• Participate in peer code reviews to improve the security and quality of products
• Communicate with customers, researchers, vendors, and other third parties regarding security issues
• Help build a strong security culture through collaboration, technical guidance, and knowledge sharing

Senior Security Engineer

• Own identity and SSO in Google Workspace, including groups, SCIM provisioning, MFA, and access policies
• Run the macOS fleet through Iru, including enrollment, configuration, patching, and compliance
• Automate joiner, mover, and leaver flows from Rippling
• Own SaaS licensing and application provisioning with lightweight support through automation and self-service
• Own security controls across AWS, GitHub, Kubernetes, and the SaaS environment
• Manage role-based access, IAM hygiene, cloud guardrails, network boundaries, and secrets management
• Run vulnerability management from findings through remediation and verification with owners and SLAs
• Run access reviews and generate audit evidence through Vanta
• Contribute security perspectives to incidents and post-incident reviews
• Use AI-assisted and agentic workflows to reduce manual work and investigate issues faster
• Report to the Senior Manager, Platform Engineering and collaborate across Maze

• Strengthen security across Tribe FEC by turning complex risks, policies, and regulatory requirements into clear decisions, practical controls, and consistent ways of working.
• Lead the area- and tribe-wide security community, align priorities and standards, and promote consistent execution across the organisation.
• Embed security, resilience, fraud prevention, and compliance throughout the software delivery lifecycle.
• Partner with Engineering, Architecture, Risk, Security, and Product teams to design, build, and operate secure solutions.
• Maintain visibility of the security posture, set priorities, and enable informed decisions.
• Translate central security policies, standards, and controls into actionable plans for technology teams.
• Monitor risks, findings, exceptions, and remediation; escalate critical or recurring issues.
• Lead tribe/area-wide security forums and strengthen capability through coaching, peer reviews, and knowledge sharing.
• Lead teams functionally by aligning security priorities, quality standards, and ways of working across the tribe.
• Report security risks, overdue actions, and remediation progress to the Tribe Leadership Team.
• Act as the area’s primary security counterpart for the tribe and CISO organisation.
• Drive secure-by-design practices, stakeholder alignment, and regulatory compliance across FEC Workflow Management.
• Embed security in the SDLC through threat modelling, secure coding, architecture reviews, and DevSecOps automation.
• Coordinate vulnerability management, incident response, security assessments, and team enablement.
• Advise the tribe on security capacity, priorities, and capability development.

Security Professional

• Klanten adviseren over cyberbeveiligingsprogramma's, -strategieën en -risico's
• Potentiële bedreigingen en kwetsbaarheden voor operationele omgevingen identificeren
• Penetratietestprojecten managen, waaronder internet-, intranet-, draadloze, webapplicatie-, social-engineering- en fysieke penetratietesten
• Red-teamscenario's leiden en uitvoeren om beveiligingshiaten te identificeren
• Zelfstandig werken en een team van technische testers leiden bij penetratietesten en red-teamopdrachten
• Technisch leiderschap bieden en consultants en senior consultants adviseren over aanval- en penetratietestopdrachten
• Codeanalyses en security-code reviews managen
• Beveiligingslekken in uiteenlopende systemen identificeren en exploiteren
• Resultaten van penetratietests diepgaand analyseren en rapportage over bevindingen, exploitatieprocedures, risico's en aanbevelingen aansturen
• Complexe technische beveiligingsconcepten uitleggen aan technische en niet-technische doelgroepen, inclusief leidinggevenden
• Bijdragen aan zakelijke veerkracht binnen een internationaal verbonden Cyber-team

Manager Cybersecurity – Offensive Security, Red Teaming

• Proactief cybersecurityrisico’s en kwetsbaarheden identificeren
• Bedreigingen monitoren en de effecten van echte aanvallen onderzoeken
• De effectiviteit van technische beveiligingsmaatregelen in complexe IT-omgevingen beoordelen
• Advies geven om beveiligingsmaatregelen te verbeteren
• Klantrelaties onderhouden en klantuitdagingen vertalen naar concrete opdrachten
• Penetratietesten coördineren en uitvoeren op cloudapplicaties, applicaties, platformen en infrastructuren
• Social-engineeringassessments, architectuurreviews, configuratiereviews en broncodereviews uitvoeren
• Complexe red-teamopdrachten uitvoeren volgens het TIBER-raamwerk
• Verbeterplannen ontwerpen en klanten begeleiden bij de uitvoering
• Adviezen rapporteren en presenteren aan systeembeheerders, ontwikkelaars, teamleiders en hoger management

Senior Ethical Hacker – Cyber Security

• Conduct comprehensive security assessments of applications, services, APIs, and supporting architectures
• Perform manual and tool-assisted secure code reviews
• Facilitate threat modelling for new and existing applications
• Review application and cloud architectures and provide security recommendations
• Utilize, configure, and support SAST, DAST, and SCA tools
• Validate automated security findings, eliminate false positives, evaluate exploitability, and assess technical and business impact
• Help prioritize vulnerabilities based on severity, exploitability, application criticality, and enterprise risk
• Define remediation actions with software development teams and track resolution
• Support secure coding, security-by-design, and application security controls throughout the software development lifecycle
• Develop and improve application security standards, guidance, review processes, and reusable security patterns
• Communicate application security risks to technical and non-technical stakeholders
• Complete an agreed number of application security assessments per quarter and reduce organizational security risks
• Collaborate with software engineers, architects, security teams, and business stakeholders on enterprise projects

Security Engineer jobs in Netherlands

Staff Security Researcher – Europe

Information Security and Compliance Specialist

Senior Security Engineer – SecOps

Senior Security Engineer – Identity and Access Management

Senior Security Engineer

Senior Security Engineer

Security Professional

Manager Cybersecurity – Offensive Security, Red Teaming

Senior Ethical Hacker – Cyber Security

Application Security Consultant