Principle Security Engineer

ParkBee; Amsterdam; On-site; EUR 120,000 - 180,000; Full time

Benefits offered by this job

Competitive salary based on experience

€1,500 learning allowance annually

Growth and development initiatives

Mental health support with OpenUp

25 days holiday plus extra leave

Job summary

ParkBee is seeking a Principal Security Engineer to define and lead security across our platform, AWS cloud, on-site hardware, and AI usage. This hands-on role sits with the Platform team and spans the whole company, requiring strong cross-functional leadership and a track record of secure delivery.

You will drive vulnerability management, threat modelling, and secure coding practices, partnering with Platform and Ops to raise the security bar as ParkBee scales across Europe.

Qualifications

• 7–10 years of engineering experience, with at least 3 focused on security; ideally as a security lead or sole owner
• Proven experience owning security direction, standards, and decisive security calls
• Sharp risk-based judgement to prioritise limited effort across a broad surface
• Ability to influence cross-functional teams to take security seriously
• Hands-on application and infrastructure security expertise across secure SDLC, threat modelling, code review, and CI/CD security controls
• Strong cloud security expertise on AWS/EKS; IAM, network security, IaC, and container hardening
• Experience with vulnerability management and incident response, incl. bug-bounty or pentest programs
• Experience selecting and rolling out security monitoring tools (SIEM/EDR/GuardDuty)
• Familiarity with security frameworks (OWASP/NIST/CIS/ISO 27001/SOC 2)
• Nice to have: TS/Node/ReactNative stack familiarity; hardware/IoT security; AI/LLM security; CISSP/CISM/OSCP/CKS certifications

Responsibilities

• Own security across ParkBee: define strategy, standards, and roadmap for engineering, Platform, and Ops
• Run vulnerability management end-to-end; triage and close findings; lead bug-bounty and pen tests; drive incident response
• Mature secure development: extend code scanning, add dependency and container scanning, threat modelling at design review
• Set up proactive security monitoring and threat detection; define alerts and drive adoption
• Review AWS/EKS setup; strengthen IAM, network security, and IaC practices
• Secure on-site technology: ANPR and access-control hardware, network segmentation, secure installation standards
• Lead security champions program and apply frameworks pragmatically (OWASP, ISO 27001, SOC 2, GDPR)
• Govern AI usage and guardrails for AI-assisted development and data handling

Skills

Security leadership

Security strategy

Threat modelling

Vulnerability management

Incident response

Secure SDLC

CI/CD security

Cloud security (AWS/EKS)

IAM least privilege

Network security

IaC (Terraform)

Kubernetes hardening

Security monitoring (SIEM/EDR)

OWASP/NIST/CIS/ISO 27001

AI/LLM security

Bug bounty / pentest

Security tooling (SAST/SCA/secret/cont

Tools

SonarQube

Snyk

Trivy

AWS GuardDuty

Terraform

Kubernetes

Job description

Founded on Empathy, Fuelled by Impact At ParkBee, our mission is to give space back to the cities by creating a seamless experience for drivers with an interconnected European parking network. Our philosophy is to build distinctive products and services that enhance existing resources without generating new ones, all nurtured by an enduring empathy for drivers and partners. Joining ParkBee means you'll be part of a team that's driving change and making a difference in the world.

Role Overview

As Security Engineer at ParkBee, you define, build and lead security across our whole platform, our applications, our AWS cloud and infrastructure, the hardware at our parking locations, and our use of AI. You'll do it as a hands‑on builder, not a policy desk: owning the roadmap, maturing the controls we already have, and being the technical decision‑maker for how security is done at ParkBee. You'll sit within our Platform team, with a mandate that spans the whole company.

This role is ideal for a senior practitioner who enjoys operating at the intersection of software engineering, infrastructure and cross‑functional leadership, someone who can take security from strategy through to shipped controls, bring what exists today under one clear owner, and raise the bar as we scale across Europe.

What You'll Be Doing

• Own security across ParkBee and set its direction: define the strategy, standards and roadmap, decide how security is done here, and be accountable for it across engineering, Platform and Ops.
• Run vulnerability management end to end - triage, prioritise and close findings from HackerOne and our scanning, own the bug‑bounty and penetration‑testing programmes, and lead incident response with root‑cause fixes.
• Mature how we build securely: extend the code scanning we already run, add dependency, secret and container scanning where it's missing, introduce threat modelling at design review, and set gates that catch issues before release.
• Set up proactive security monitoring and threat detection - choose the tooling, define alerting, drive adoption, and cover phishing and brand/domain abuse.
• Partner with the Platform team to keep infrastructure security at a high bar - review the AWS/EKS setup and flag where IAM, network security, IaC or Kubernetes hardening needs strengthening.
• Partner with Ops to secure our on‑site technology: ANPR and access‑control hardware, network segmentation at locations, and secure installation standards.
• Raise the security bar across the company: run a security‑champions and awareness programme, apply frameworks pragmatically (OWASP, ISO 27001, SOC 2, GDPR), and own audits and third‑party/vendor risk.
• Govern how we build with and use AI - set the guardrails for AI‑assisted development and company‑wide AI use, including review of AI‑generated code and how AI handles our data.

What You Bring

• 7–10 years of engineering experience, with at least 3 of those focused on security; ideally as a security lead or the sole security owner in an organisation
• Proven experience owning security in a previous role; you've set the direction and standards, and been the person trusted to make the security call
• Sharp, risk‑based judgement; you can prioritise limited effort across a broad surface and decide what to fix, accept or defer, and stand behind it
• The ability to influence without authority; a track record of getting engineering, infrastructure and operations teams to take security seriously and act
• Deep hands‑on application and infrastructure security expertise; secure SDLC, threat modelling, secure code review, and CI/CD security controls (SAST, SCA, secret and container scanning; e.g. SonarQube, Snyk, Trivy)
• Strong cloud security expertise on AWS/EKS; IAM and least‑privilege, network security, infrastructure‑as‑code (Terraform), and Kubernetes/container hardening
• Experience with vulnerability management and incident response, including bug‑bounty or penetration‑testing programmes
• Experience selecting and rolling out security monitoring and detection tooling (SIEM, EDR, or cloud‑native such as AWS GuardDuty)
• A working command of security frameworks (OWASP, NIST, CIS, ISO 27001 or SOC 2) and how to apply them pragmatically
• Nice to have: familiarity with our stack (Typescript, C#/.NET, NodeJS, ReactNative); hardware/IoT or physical‑site security (ANPR, access‑control hardware); AI/LLM security; fraud and brand‑abuse response; certifications such as CISSP, CISM, OSCP, or CKS

What You'll Receive

We Believe a Career As a Principal Security Engineer At Our Company Offers Exponential Growth And Learning Through An Environment That Promotes High Ownership, Accountability, And Impact At Every Level. In Addition, We Offer a Competitive Reward Package, Including

• Attractive salary based on experience
• An annual allowance of €1,500 for learning and growth in your role
• Numerous growth and development initiatives, training and projects
• Access to professional mental health support with OpenUp
• 25 days holiday plus additional leave schemes
• Daily fresh lunch in the office with small contribution (primarily in‑person, with home‑working flexibility)
• Easy commute with an NS business card, mileage reimbursement, and access to shared cars when needed
• A generous employer pension scheme and additional long‑term performance‑based incentives