Junior Security Engineer

Exact Software Germany GmbH; Delft; On-site; EUR 75,000 - 95,000; Full time

Job summary

Exact Software Germany GmbH is seeking a security-focused engineer to develop secure tooling and IAM features across Exact's product suite. You will participate in campaigns to inventory, rank risk, investigate high-risk areas, and report findings clearly to engineering teams.

You will also tackle low-level security issues, build shift-left tooling/playbooks, and contribute to ongoing scanning and testing programs to improve product security.

Qualifications

• Experience building secure tooling and IAM functionality.
• Experience conducting structured security campaigns and reporting findings.
• Ability to translate security findings into concrete fixes and guidance.

Responsibilities

• Write code to build secure tooling and IAM functionality; contribute to playbooks.
• Participate in security campaigns: inventory, risk ranking, deep investigations, reporting.
• Tackle low-level security issues and build tools to prevent insecure software patterns.
• Help build and improve shift-left security tooling and playbooks.
• Contribute to recurring scanning and testing programs and coordinate with engineering teams.

Skills

Security engineering

IAM

Secure tooling

Threat modeling

Code review

Tools

Burp Suite

OWASP ZAP

C#/.NET

Python

PHP

Job description

This = the job

Security Operations is Exact's security engineering team, owning two areas: security across Exact's full product portfolio, and the development of Identity and Access Management (IAM) functionality used across Exact's products. The team builds secure tooling that integrates into engineering teams' existing workflows, bringing a security-first mindset into the development lifecycle (SSDLC). Automation covers what it can; manual, pentest-style testing covers what it can't.

This = the job that you aspire to

• Within the team, you write code across several fronts: building secure tooling and playbooks that make secure software the default, translating findings into concrete low-level fixes, and contributing to the development of Identity and Access Management (IAM) functionality.
• When deeper investigation is needed, you take part in structured security campaigns: building an inventory of what needs to be checked, ranking findings by risk, investigating the highest-risk areas in depth, and reporting clearly on what was tested, what was found, and what remains open.
• You help tackle low-level security issues and build tools that prevent insecure software patterns.
• You help build and improve the team's shift-left security tooling and playbooks.
• You contribute to the team's recurring scanning and testing program, following up with engineering teams on findings.

This = your team

Security Operations is part of Technology, made up of security-minded software engineers who both build and break things: building secure tooling and IAM functionality, and testing systems the way an attacker would to see if they hold up. The team continuously refines its tooling, playbooks, and methods based on what it finds.

This = our tech stack

Exact's core products are primarily built in C#/.NET.Across the wider Exact portfolio you will also encounter other languages, such as C, Python, and PHP - comfort reading unfamiliar code is useful, though you don't need to master every language. The team relies on a combination of automated scanning and dependency tooling, AI-assisted analysis, and manual, pentest-style testing with tools such as Burp Suite or OWASP ZAP.