Software Security Engineer

FOSS; Hillerød Kommune; On-site; DKK 650,000 - 850,000; Full time

Job summary

FOSS in Denmark is seeking a Software Security Engineer to bridge security and software engineering, working with IQX, SRE and OT information security teams. This role is based at the FOSS Innovation Centre in Hillerød with onsite presence and occasional travel.

You will influence security decisions, design secure SDLC practices, and drive Azure Defender for Cloud findings, risk triage and remediation with pragmatic, developer-friendly approaches.

Qualifications

• Strong grounding in application security and secure SDLC.
• Ability to operationalize security in development teams.
• Experience with SAST/SCA tooling and gate design.
• Knowledge of cloud security postures and Defender for Cloud.
• Familiarity with Cyber Resilience Act, NIS2 and GDPR.

Responsibilities

• Own static and composition analysis tooling and gates.
• Secure development practices and target setting with departments.
• Provide security input into architecture and design decisions.
• Own cloud security posture, Defender for Cloud findings and remediation.
• Handle customer security questionnaires and assess third-party components.
• Triage vulnerabilities from scans and tests and drive closures.
• Drive AI and SW Security integration with OT information security manager.

Skills

Application security

Secure SDLC

DevSecOps

Influence without authority

English proficiency

Tools

SonarQube

Microsoft Defender for Cloud

Azure

Job description

At FOSS, we are driven by a strong sense of purpose, and we hope you are too. By 2030, the world population will exceed 9 billion and the middle class will have doubled. This means we will need to be outstandingly smart about our global food production. FOSS is on a mission to enable the sustainable use of the planet’s food resources, and thus to the nutrition of the people of the world. As a global market leader, we contribute through innovative food analysis, which is used to secure food quality, reduce waste, and optimize food production. If that sounds like something you’d like to be a part of, read on!

What you will be doing

FOSS builds software in two very different places: the software for and in our analytical instruments, and the IQX cloud platform those instruments are connected to. Both ship to customers, and both are in scope for the EU Cyber Resilience Act and NIS2.

At FOSS we seek to strengthen monitoring, planning and the strategic outlook to secure our software and out customers solutions. As our new Software Security Engineer, you will work with the IQX department, SRE, and OT information security manager.

Key responsibilities include:

• Own our static and composition analysis tooling, including SonarQube quality gates and exceptions. The goal is scanning that teams use, not a gate they work around
• Build secure development practice across our operations and development by securing visualization of current state, setting targets together with the different departments as well as ensuring the Azure recommendations are applied.
• Provide security input into architecture and design decisions
• Own cloud security posture: Microsoft Defender for Cloud findings, secure score and recommendations, triaged into work that gets done
• Handle customer security questionnaires and assess the third-party components and vendors we depend on
• Triage vulnerabilities in our software, from scanning, our own penetration testing or outside reports, and drive what matters to closure
• Drive combining AI and SW Security in our development and products together with the OT Information Security manager.

What we hope to see you bring

This role sits between security and engineering and only works if both sides take you seriously. If you are strong on most of it and interested in the rest, apply and tell us which is which.

• A solid grounding in application security - OWASP, secure SDLC, DevSecOps - and experience making it work inside real development teams
• A technical background, but also understand how to operate at a tactical level.
• Experience with SAST and SCA tooling such as SonarQube, including quality gate design and the judgement to grant an exception without hollowing out the gate
• Cloud security posture management, ideally Azure and Microsoft Defender for Cloud
• Enough working knowledge of the Cyber Resilience Act, NIS2 and GDPR to turn them into engineering requirements rather than policy text
• Credibility with developers, the ability to influence without direct authority, and the pragmatism to tell apart a control that improves security from one that only produces evidence
• Professional-level English. Danish is an advantage, not a requirement

Why choose FOSS?

You get two quite different software worlds in one role: a cloud platform under active development, and embedded software inside instruments that measure most of the world’s milk and grain. The role is new, the mandate is real, and it reports to the Head of Information Security rather than to a delivery team where security competes with the release date. We support relevant certification and training. The position is full-time at the FOSS Innovation Centre in Hillerød, with onsite presence and occasional travel.

FOSS is committed to maintaining an inclusive and diverse culture. You can help us sustain an unbiased recruitment process by not including photo and age in your application.

About FOSS

Today, more than 8 billion people around the world are dependent on nutritional food. Tons of food being produced in a million different ways and under varying conditions, creating challenges all the way from field to fork. One of them, obviously, is the effect it has on climate change.

FOSS helps the world’s 100 biggest food companies, and more than 40,000 others around the world navigate exactly that with intelligent, data-driven and innovative analytical solutions. We are making sustainability a better business, and we’re doing so as the global market leader in our field – improving food quality, minimizing food waste, ensuring food safety, and securing fair payment.

Join a pioneering and innovative company in the food and agriculture industry. A company on a mission, with offices all around the world and 1,750 talented colleagues across 34 different countries.

Apply for job as Software Security Engineer in IT, Finance & Compliance

If you have any questions about the role, please contact Christian Ryge, Head of Information Security, at [phone].