Security Engineer.

Nedap; Groenlo; Hybrid; EUR 56,000 - 84,000; Full time

Benefits offered by this job

13th-month pay

Pension plan

Profit sharing / shareholder options

Job summary

Nedap Healthcare is seeking a Senior Security Engineer to strengthen security across our web applications and embed secure-by-design principles in development teams. You will coach developers, handle penetration testing, and focus on threats, privacy, and data protection for healthcare software like Ons Suite, Caren, Luna and MediKit.

The role offers a hybrid schedule with 32–38 hours per week, based in Groenlo.

Qualifications

• Proven experience in web application security and penetration testing.
• Experience with secure code reviews and threat modeling.
• Relevant offensive security certifications (OSWE, OSWA, CWEE) or demonstrable hands-on security experience.

Responsibilities

• Strengthen the security and user experience of our web applications, ensuring they are resilient against advanced and emerging threats.
• Proactively identify and address security and privacy vulnerabilities to protect sensitive healthcare data.
• Safeguard the integrity of web components and browser interactions to prevent misuse.
• Promote industry-leading security practices and contribute to continuously improving our security and privacy posture.
• Conduct penetration tests, simulate advanced attack scenarios, and translate findings into actionable improvements.
• Coach and support developers in independently applying secure development practices, strengthening a shift-left security mindset.

Skills

Web application security

Penetration testing

Secure code reviews

Threat modeling

Security best practices

Education

OSWE

OSWA

CWEE

Job description

Security Engineer

Groenlo, Netherlands

32 - 38 hrs

€ 5.000 - € 7.500

Hybrid

What are you going to do?

At Nedap Healthcare, our software solutions support thousands of healthcare professionals every day. Solutions such as Ons Suite, Caren, Luna, and MediKit help reduce administrative burden, provide greater clarity, and enable better collaboration. As a Senior Security Engineer, you play an important role in keeping these products secure and reliable.

You strengthen the security of our web applications, identify vulnerabilities before they can impact users, and embed secure-by-design principles across our development teams. By coaching and supporting developers, you help make security a shared responsibility. This enables you to focus on complex threats, business logic risks, and structural security improvements.

Your responsibilities

Strengthen the security and user experience of our web applications, ensuring they are resilient against advanced and emerging threats.

Proactively identify and address security and privacy vulnerabilities to protect sensitive healthcare data.

Safeguard the integrity of web components and browser interactions to prevent misuse.

Promote industry-leading security practices and contribute to continuously improving our security and privacy posture.

Conduct penetration tests, simulate advanced attack scenarios, and translate findings into actionable improvements.

Coach and support developers in independently applying secure development practices, strengthening a shift-left security mindset.

Your team

You will become part of the Data Protection group within Nedap Healthcare. This group works closely with multiple development teams, helping them build secure and future-proof products. Knowledge sharing, collaboration, and continuous improvement are at the heart of how we work. You’ll be part of an environment where expertise is valued and everyone contributes to increasing our overall security maturity.

Our offer

What's in it for you?

As a Senior Security Engineer at Nedap, you will make a valuable contribution to our goal: helping people become happier and more successful in their professional lives. The salary range for this role is between €5,000 and €7,500 gross per month, based on full-time employment (38 hours per week), depending on relevant knowledge and experience.

In addition to your salary, you are entitled to a 13th-month payment, a solid pension plan, and profit sharing, with the opportunity to become a Nedap shareholder.

At Nedap, everything revolves around trust and autonomy. That’s why, in consultation with your colleagues, you can arrange your own working hours and vacation days to maintain a healthy work-life balance. We also place great importance on personal and professional growth. You will receive an extensive onboarding programme, and we encourage you to continuously develop yourself.

Curious about all our employment benefits?

All terms of employment

Required Skills

You have strong experience in web application security and are able to explain complex security topics clearly and accessibly to both technical and non-technical colleagues. With your analytical mindset, attention to detail, and collaborative approach, you help teams increase their security maturity.

• Professional Experience: Demonstrable experience in web application security and penetration testing, including secure code reviews and threat identification.
• Security: Familiarity with OWASP SAMM and embedding security best practices throughout the development lifecycle.
• Certifications: Relevant offensive security certifications (such as OSWE, OSWA, or CWEE) or equivalent demonstrable hands-on experience.

Good to know

You are available for 32–38 hours per week. Hybrid (remote) working is common at Nedap, and together with your team, you can coordinate your working hours to maintain a healthy work-life balance. Ideally, you will be present at our campus in Groenlo at least twice a week.

Get in touch!

Are you interested in the Senior Security Engineer position, or would you like to learn more about working at Nedap? Feel free to contact Noa Serra de Kloet at [e-mail]. We’d be happy to tell you more!