Head of Secure Engineering & DevSecOps

VELUX; Østbirk; On-site; DKK 900,000 - 1,300,000; Full time

Job summary

VELUX invites applications for a Lead Cyber Security Engineer based in Denmark, Østbirk. You will guide secure-by-design practices across the product lifecycle, collaborating with software engineering, IT, regulatory functions and external partners.

You will drive security maturity through risk assessments, DevSecOps integration and threat modelling, influencing product development and compliance with evolving regulations. The role blends hands-on security with strategic leadership.

Qualifications

• Requires a relevant degree in Computer Science, Software Engineering or related field.
• More than 10 years of cybersecurity experience.
• Expert knowledge of security principles across embedded, cloud and mobile environments; strong IT infrastructure and end-to-end security.

Responsibilities

• Drive the adoption of secure engineering practices across embedded, cloud and mobile technologies.
• Lead security risk assessments, design reviews and technical assurance activities.
• Embed DevSecOps principles, security tooling and secure development practices across engineering teams.
• Translate regulatory and industry frameworks into scalable operational practices.
• Build cyber security capability through coaching and Security Champion initiatives.
• Partner with internal stakeholders, suppliers and external organisations to strengthen governance and security maturity.

Skills

Vulnerability management

Patch governance

Input validation

Encryption

Certificate handling

Endpoint protection

IAM

Cloud security

Threat modelling

Static analysis tools

Security maturity

Education

Bachelor's degree in Computer Science

Software Engineering degree

Tools

SBOM

SCA

SAST

Job description

VELUX invites applications for a Lead Cyber Security Engineer based in Denmark, Østbirk. You will guide secure-by-design practices across the product lifecycle, collaborating with software engineering, IT, regulatory functions and external partners.

You will drive security maturity through risk assessments, DevSecOps integration and threat modelling, influencing product development and compliance with evolving regulations. The role blends hands-on security with strategic leadership.