Security Engineer

Nedap Beveiligingstechniek B.V.; Groenlo; Hybrid; EUR 56,000 - 84,000; Full time

Benefits offered by this job

13th-month salary

Pension plan

Profit sharing

Shareholder opportunity

Job summary

Nedap Beveiligingstechniek B.V. is seeking a Senior Security Engineer to strengthen security across Nedap Healthcare web applications. You will identify vulnerabilities, promote secure-by-design, and coach developers to improve security maturity.

This role emphasizes complex threat handling and collaboration with multiple teams. The position offers hybrid work in Groenlo, with 32–38 hours per week and a salary range of €5,000–€7,500 gross per month, plus a 13th month, pension, and profit

Qualifications

• Experience in web application security and penetration testing.
• Experience with secure code reviews and threat identification.
• Familiarity with OWASP SAMM and secure development lifecycle practices.
• Relevant offensive security certifications or hands-on experience.

Responsibilities

• Strengthen the security of web applications and ensure resilience against threats.
• Identify and address security and privacy vulnerabilities to protect data.
• Safeguard integrity of web components and browser interactions.
• Promote secure development practices across teams and encourage a shift-left mindset.
• Conduct penetration tests and translate findings into actionable improvements.
• Coach developers to apply secure coding practices independently.

Skills

Web application security

Penetration testing

Secure code reviews

Threat modeling

OWASP SAMM

Education

CWEs/OSWE or OSWA/CWEE certifications

Tools

OWASP SAMM

Job description

Groenlo, Netherlands

32 - 38 hrs

€ 5.000 - € 7.500

Hybrid

What are you going to do?

At Nedap Healthcare, our software solutions support thousands of healthcare professionals every day. Solutions such as Ons Suite, Caren, Luna, and MediKit help reduce administrative burden, provide greater clarity, and enable better collaboration. As a Senior Security Engineer, you play an important role in keeping these products secure and reliable.

You strengthen the security of our web applications, identify vulnerabilities before they can impact users, and embed secure‑by‑design principles across our development teams. By coaching and supporting developers, you help make security a shared responsibility. This enables you to focus on complex threats, business logic risks, and structural security improvements.

Your responsibilities

• Strengthen the security and user experience of our web applications, ensuring they are resilient against advanced and emerging threats.
• Proactively identify and address security and privacy vulnerabilities to protect sensitive healthcare data.
• Safeguard the integrity of web components and browser interactions to prevent misuse.
• Promote industry‑leading security practices and contribute to continuously improving our security and privacy posture.
• Conduct penetration tests, simulate advanced attack scenarios, and translate findings into actionable improvements.
• Coach and support developers in independently applying secure development practices, strengthening a shift‑left security mindset.

Your team

You will become part of the Data Protection group within Nedap Healthcare. This group works closely with multiple development teams, helping them build secure and future‑proof products. Knowledge sharing, collaboration, and continuous improvement are at the heart of how we work. You’ll be part of an environment where expertise is valued and everyone contributes to increasing our overall security maturity.

Our offer

As a Senior Security Engineer at Nedap, you will make a valuable contribution to our goal: helping people become happier and more successful in their professional lives. The salary range for this role is between €5,000 and €7,500 gross per month, based on full‑time employment (38 hours per week), depending on relevant knowledge and experience.

In addition to your salary, you are entitled to a 13th‑month payment, a solid pension plan, and profit sharing, with the opportunity to become a Nedap shareholder.

At Nedap, everything revolves around trust and autonomy. That’s why, in consultation with your colleagues, you can arrange your own working hours and vacation days to maintain a healthy work‑life balance. We also place great importance on personal and professional growth. You will receive an extensive onboarding programme, and we encourage you to continuously develop yourself.

Required Skills

You have strong experience in web application security and are able to explain complex security topics clearly and accessibly to both technical and non‑technical colleagues. With your analytical mindset, attention to detail, and collaborative approach, you help teams increase their security maturity.

In addition, you bring

• Professional Experience: Demonstrable experience in web application security and penetration testing, including secure code reviews and threat identification.
• Security: Familiarity with OWASP SAMM and embedding security best practices throughout the development lifecycle.
• Certifications: Relevant offensive security certifications (such as OSWE, OSWA, or CWEE) or equivalent demonstrable hands‑on experience.

Good to know

You are available for 32–38 hours per week. Hybrid (remote) working is common at Nedap, and together with your team, you can coordinate your working hours to maintain a healthy work‑life balance. Ideally, you will be present at our campus in Groenlo at least twice a week.

About Nedap

Nedap is a global leader in Digital Twin Technology, bridging the physical and digital worlds in Retail, Healthcare, Livestock, and Security. Guided by our Technology for Life philosophy, we create smart, sustainable solutions that help people and organizations thrive in a rapidly changing world. With over 1,000 colleagues, we shape the future with meaningful innovations.

Get in touch!

Are you interested in the Senior Security Engineer position, or would you like to learn more about working at Nedap? Feel free to contact Noa Serra de Kloet at [e-mail]. We’d be happy to tell you more!