Cloud & Application Security Engineer – DevSecOps Leader

FOSS Analytics; Denmark; On-site; DKK 750,000 - 1,100,000; Full time

Job summary

FOSS is seeking a Software Security Engineer to embed secure development in IQX and R&D software at the Innovation Centre in Hillerød, Denmark. You will report to the Head of Information Security and collaborate with the IQX department, SRE, and cross-functional R&D teams.

You will own static analysis tooling, drive secure development practices across teams, and help shape architecture decisions early to improve security across cloud and embedded software.

Qualifications

• Solid grounding in application security - OWASP, secure SDLC, DevSecOps, and real-world development integration.
• Shipped production code; discuss findings with developers as peers (C#, Python, C, C++ or comparable).
• Experience with SAST/SCA tooling (SonarQube) including quality gate design and exceptions.

Responsibilities

• Own static and composition analysis tooling, including quality gates and exceptions.
• Incorporate secure development practice across IQX and R&D; guide coding, reviews, dependency hygiene, CI/CD security.
• Provide security input into architecture and design decisions early with cross-functional teams.
• Own cloud security posture: Defender for Cloud findings, secure score, and actionable recommendations.
• Triage vulnerabilities from scanning, pen tests, or reports; drive closure with code owners.
• Train and coach developers to bake security into development processes.

Skills

Application security

Software engineering background

Programming languages

SAST/SCA tooling

Cloud security

Cyber resilience & GDPR knowledge

Developer influence

English proficiency

Tools

SonarQube

Job description

FOSS is seeking a Software Security Engineer to embed secure development in IQX and R&D software at the Innovation Centre in Hillerød, Denmark. You will report to the Head of Information Security and collaborate with the IQX department, SRE, and cross-functional R&D teams.

You will own static analysis tooling, drive secure development practices across teams, and help shape architecture decisions early to improve security across cloud and embedded software.