Code-Guided Security Engineer — Hybrid

Yielddd; Utrecht; Hybrid; EUR 65,000 - 100,000; Full time

Benefits offered by this job

25 vacation days

Laptop provided

Hybrid work

Pension plan

Training budget and certifications

Office Utrecht Campus Werkspoor

Broad role with growth

Certifications support

Job summary

YieldDD is seeking a security assessment specialist to perform in-depth, code-guided penetration testing across client environments, including applications, APIs, and internal systems. You will combine manual and automated techniques to uncover real exposure beyond automated scans.

You will present findings to engineering teams and management, and contribute to the evolution of YieldDD's methodologies and tooling. Fluent Dutch and English are required, with hybrid work from Utrecht.

Qualifications

• At least 3 years of experience in security assessments and penetration testing.
• Proven experience with code-guided or white-box penetration testing.
• Able to navigate an unfamiliar codebase quickly and independently under time pressure.
• Knowledge of commonly used security AI tooling.
• Proficiency in both manual techniques and automated tooling.
• Experience with multiple programming languages.
• Strong written and verbal communication skills for non-technical readers.
• Fluency in Dutch and English, spoken and written.

Responsibilities

• Execute code-guided penetration tests with full source code access.
• Perform manual and automated penetration tests across apps, APIs and internal systems.
• Conduct in-depth cloud configuration reviews and identify risks.
• Perform recurring vulnerability assessments to prioritize exposures over time.
• Apply SAST and DAST tooling and interpret results beyond tooling output.
• Translate findings into risk-prioritized reports for engineers and leadership.
• Participate in client debriefings to discuss findings and remediation decisions.
• Contribute to YieldDD's security methodologies and tooling.
• Share knowledge through tech sessions, training, and events.

Skills

Code-guided pentesting

White-box testing

Security assessments

Manual & automated testing

Programming languages

Technical reporting

Dutch & English fluency

Job description

YieldDD is seeking a security assessment specialist to perform in-depth, code-guided penetration testing across client environments, including applications, APIs, and internal systems. You will combine manual and automated techniques to uncover real exposure beyond automated scans.

You will present findings to engineering teams and management, and contribute to the evolution of YieldDD's methodologies and tooling. Fluent Dutch and English are required, with hybrid work from Utrecht.