SaaS Cloud Security Engineer | Azure Defender

FOSS; Hillerød Kommune; On-site; DKK 700,000 - 1,100,000; Full time

Job description

Do you want to join a global market leader in developing world-class digital solutions? FOSS is on a mission to enable the sustainable use of our planet’s agricultural resources. Our contribution is advanced food analytics - helping secure food quality, reduce waste, and optimize production. With decades of experience serving the world’s largest food companies, FOSS has unique insights and the ideal foundation to create software and systems that empower food analytics.

What you will be doing

FOSS instruments are increasingly connected, and IQX, our cloud platform, is where instruments, data and customers meet. Cloud security has been a priority at FOSS for years, and we run a mature information security management system certified to ISO/IEC 27001. As customers move more of their quality data onto IQX, and as the EU Cyber Resilience Act and NIS2 raise the bar for connected products, the security of the platform is central to the trust our customers place in us.

As our SaaS Security Engineer, you will be part of the Information Security team and report to the Head of Information Security, while most of your working week is spent inside IQX Operations, securing the IQX platform day to day. You will work closely with SRE, DevOps Engineers and the IQX Enterprise Architect in IQX Infrastructure, the software development teams in R&D, and coordinate with the OT Information Security Manager in R&D where the cloud meets the instruments. IQX and our corporate IT run on the same Microsoft security platform, Entra ID, Defender and Sentinel, and you will help us apply one set of security standards across both. Over time, the role will also support R&D Software with secure development.

Key responsibilities include:

• Own the cloud security posture of IQX: Microsoft Defender for Cloud findings, secure score and Azure recommendations, turned into prioritized work that gets done
• Identify, assess and follow up security risks for the platform and its services, as part of Information Security's risk management
• Work with Entra ID, Defender and Sentinel across IQX and corporate IT, so that identity, detection and monitoring follow the same standards
• Manage static and software composition analysis, such as SonarQube, together with R&D, including quality gates and how exceptions are handled, so that scanning becomes part of how teams work rather than an obstacle to it
• Provide security input into architecture and design, together with the IQX Enterprise Architect
• Strengthen secure development and operations practice: make the current state visible, agree targets with the teams and follow up
• Triage vulnerabilities in the platform, from scanning, penetration tests or outside reports, and drive what matters to closure through Information Security's vulnerability handling and reporting process
• Answer IQX-related customer security questions and assess the third-party components and vendors the platform depends on
• Help shape how AI is used securely in our development and products, together with the OT Information Security Manager

What we hope to see you bring

This role belongs to Information Security but lives inside IQX Operations and works with development every day. It only works if both engineers and security people take you seriously. If you are strong on most of the list below and curious about the rest, apply and tell us which is which.

• A solid grounding in application and cloud security, such as OWASP, secure SDLC and DevSecOps, and experience making it work inside real development teams
• Hands-on experience securing Azure and the Microsoft security stack, ideally Defender for Cloud, Entra ID and Microsoft Sentinel
• Experience with SAST and SCA tooling such as SonarQube, including quality gate design and the judgment to grant an exception without hollowing out the gate
• Experience with security risk assessment: identifying, rating and following up risks in a way the business can act on
• A technical background combined with the ability to plan, prioritize and look beyond the next ticket
• Enough working knowledge of the Cyber Resilience Act, NIS2 and GDPR to turn them into engineering requirements rather than policy text
• Credibility with developers, the ability to influence without authority, and the pragmatism to tell a control that improves security from one that only produces evidence
• Professional-level English. Danish is an advantage, not a requirement

Why choose FOSS?

You will secure the platform that connects instruments testing most of the world's milk and traded grain, and the data our customers base quality and payment decisions on. You join the Information Security team, work day to day alongside IQX Operations and our development teams and have real influence on how the platform and its security evolve. We support relevant certification and training. The position is full-time at the FOSS Innovation Center in Hillerød, with onsite presence and occasional travel.

We would love to hear from you!

FOSS is committed to maintaining an inclusive and diverse culture. You can help us sustain an unbiased recruitment process by not including photo and age in your application.

About FOSS

Today, more than 8 billion people around the world are dependent on nutritional food. Tons of food being produced in a million different ways and under varying conditions, creating challenges all the way from field to fork. One of them, obviously, is the effect it has on climate change.

FOSS helps the world’s 100 biggest food companies, and more than 40,000 others around the world navigate exactly that with intelligent, data-driven and innovative analytical solutions. We are making sustainability a better business, and we’re doing so as the global market leader in our field – improving food quality, minimizing food waste, ensuring food safety, and securing fair payment.

Join a pioneering and innovative company in the food and agriculture industry. A company on a mission, with offices all around the world and 1,750 talented colleagues across 34 different countries.

Apply for job as SaaS Security Engineer in IT, Finance & Compliance