Penetration Tester & Product Security Lead

FOSS Analytics; Denmark; On-site; DKK 700,000 - 1,000,000; Full time

Job summary

FOSS is seeking a Penetration Tester & Product Security Specialist to build and lead security testing across embedded instruments, cloud services and platforms. You will report to the Head of Information Security and work closely with R&D to embed security in products.

The role requires hands-on testing, vulnerability management, and the ability to communicate findings to engineers. Onsite in Hillerød, with some travel.

Qualifications

• Hands-on penetration testing against real systems and embedded/industrial targets.
• Experience in vulnerability management and SBOM/CA/CS analysis.
• Strong English communication, written and spoken.
• Familiarity with IEC 62443-4-1 and 4-2 is preferred.
• Ability to work with engineers and influence without authority.

Responsibilities

• Plan and perform hands-on penetration testing across devices, platforms, and cloud services.
• Own the penetration testing program and determine testing scope and cadence.
• Establish and run vulnerability management aligned with product changes and triage findings.
• Operate 24-hour readiness for reporting and 72-hour notification requirements.
• Support product risk assessments and STRIDE modelling with practical insights.
• Advise on secure design within IEC 62443 framework and document security evidence.

Skills

Penetration testing

Vulnerability management

Threat modelling

Product security

Professional English

Azure

Tools

SBOM

CVSS

Azure

Job description

FOSS is seeking a Penetration Tester & Product Security Specialist to build and lead security testing across embedded instruments, cloud services and platforms. You will report to the Head of Information Security and work closely with R&D to embed security in products.

The role requires hands-on testing, vulnerability management, and the ability to communicate findings to engineers. Onsite in Hillerød, with some travel.