Security Operations Engineer

Exact; Delft; On-site; EUR 90,000 - 120,000; Full time

Job summary

Exact is seeking a Security Operations engineer to write code that advances secure tooling and IAM functionality across Exact's products. You will own critical parts of secure tooling, address complex low-level security issues, and help scale secure-by-default practices across the portfolio.

You will lead end-to-end security campaigns, rank findings by risk, investigate high-risk areas in depth, and report findings clearly.

Responsibilities

• Own key parts of the team's shift-left security tooling and playbooks.
• Resolve complex low-level security issues and build tools to prevent insecure patterns.
• Help run and improve the team's recurring scanning and testing program, guiding engineering teams toward fixes.
• Lead structured security campaigns end to end: defining scope, ranking findings by risk, investigating the highest-risk areas in depth, and reporting clearly on what was tested, what was found, and what remains open.
• Coach and mentor colleagues, and support threat modeling and attack-surface analysis across the team.

Job description

Security Operations is Exact's security engineering team, owning two areas: security across Exact's full product portfolio, and the development of Identity and Access Management (IAM) functionality used across Exact's products. The team builds secure tooling that integrates into engineering teams' existing workflows, bringing a security-first mindset into the development lifecycle (SSDLC). Automation covers what it can; manual, pen test-style testing covers what it can't.

This = the job that you aspire to

Within the team, you write code across several fronts: owning key parts of the secure tooling and playbooks that help secure-by-default practices scale across Exact's full portfolio, resolving the most complex low-level security issues, and contributing to the development of Identity and Access Management (IAM) functionality. As this scope grows, you also help grow the skills and capability of the team around you.

• You own key parts of the team's shift-left security tooling and playbooks.
• You resolve the most complex low-level security issues and build tools that prevent insecure software patterns.
• You help run and improve the team's recurring scanning and testing program, guiding engineering teams toward fixes.
• You lead structured security campaigns end to end: defining scope, ranking findings by risk, investigating the highest-risk areas in depth, and reporting clearly on what was tested, what was found, and what remains open.
• You coach and mentor colleagues, and support threat modeling and attack-surface analysis across the team.

This = your team

Security Operations is part of Technology, made up of security-minded software engineers who both build and break things: building secure tooling and IAM functionality, and testing systems the way an attacker would to see if they hold up. The team continuously refines its tooling, playbooks, and methods based on what it finds.