Security Practice Lead

Kramp; Utrecht; On-site; EUR 74,000 - 90,000; Full time

Benefits offered by this job

25 vacation days

Flexible working policy

Travel- and WFH allowance

Profit sharing bonus

Training budget

Generous pension plan

Job summary

Kramp is seeking a Security Practice Lead to define security practices, principles, and technical direction across its software development and implementation processes. You will guide product teams in embedding security by design and ensure security is embedded from the earliest stage.

Based in Utrecht with occasional travel to Varsseveld, you will work with Security Team, Product Teams, Tech Leads and Architects to build guardrails, tooling, vulnerability management, and measurable security

Qualifications

• Bachelor’s degree in Computer Science, Software Engineering, Cyber Security, or related field.
• 7+ years in software development, security, or advisory roles with leadership experience.
• Experience defining or shaping security engineering vision or framework across multiple teams.
• Proven use of security-by-design, vulnerability management, and security tooling.

Responsibilities

• Define and evolve Kramp’s security engineering vision, principles and standards for Product Teams.
• Define and drive security guardrails and tooling, including CI/CD controls and vulnerability responses.
• Lead vulnerability management across findings from scans and tests, with clear follow-up actions.
• Enable Secure Ways of Working via workshops and hands-on guidance for teams.
• Define security metrics and dashboards; report risks to Product Teams and management.
• Collaborate with architects and Platform Teams to embed least privilege and data minimization.

Skills

Communication skills

Collaboration

Stakeholder management

Influence without authority

Facilitation

Education

Bachelor’s degree in Computer Science, Software Engineering, Cyber Security, or a related field

Tools

SonarQube

Dependabot

CI/CD tooling

Security tooling

Job description

Would you like to be responsible for defining the security practices that embed security by design throughout Kramp’s software development and implementation processes?

We are looking for a Security Practice Lead who will establish the security practices, principles and technical direction needed across Kramp’s entire technology landscape. You will determine which security practices, standards and capabilities are most relevant for Kramp and translate these into practical ways of working for Product Teams.

You will support and guide Product Teams in implementing security best practices across internally developed applications, SaaS solutions, platform services, integrations, APIs, infrastructure components and third-party system implementations.

You will collaborate closely with the Security Team and Platform Teams to ensure security is embedded from the earliest possible stage.

Kramp Group is supported by a Product model organization consisting of a broad range of teams (around 30) focusing on business and technology. The teams work independently on improving their products and implementing systems, while together they are responsible for secure and reliable end-to-end business processes.

The Security Team and Platform Teams enable the Product Teams with principles, guidance, assessments, tooling and guardrails that support secure implementation, integration, operation and development of technology solutions.

The Security Practice Lead helps ensure these capabilities are consistently adopted and effectively used throughout the organization while continuously assessing whether they are the right capabilities for Kramp and identifying where the security practice needs to evolve.

The role

You will report to the Head of Technology Platforms and work closely with the Security Team, Product Teams, Product Owners, Tech Leads, Developers, Solution Architects and other stakeholders. You will act as an important bridge between these stakeholders, providing operational guidance on security topics to teams while supporting and guiding Product Teams to turn that direction into practical ways of working.

Within the enterprise-wide security framework set by the Head of Security, the Security Practice Lead is accountable for defining and evolving Kramp’s Security Engineering and Security Architecture principles and embedding it across Product Teams.

Furthermore You Will Work On

• Security Engineering Vision and Principles. Define and continuously develop Kramp’s security Engineering vision by assessing current maturity, identifying gaps and defining the security practices and capabilities needed. Translate the vision into clear principles, standards and practical guidance for Product Teams.
• Security Guardrails and Tooling. Define and drive consistent adoption of security tooling and guardrails, including CI/CD controls, and ensure teams understand how to respond to security findings or blocked changes.
• Vulnerability Management. Ensure Product Teams act on findings from SonarQube, Dependabot, security scans and penetration tests. Improve coverage, ownership, and follow-up, and translate recurring findings into preventive controls. Escalate unresolved risks to the Security Team.
• Secure Ways of Working. Enable Product Teams through workshops and hands-on guidance, strengthening security ownership and helping teams efficiently prioritize and address vulnerabilities.
• Security Reporting. Define meaningful security metrics and dashboards, communicate risks and trends, and drive action through transparent reporting to Product Teams and management.
• Security Architecture & Improvement. Collaborate with architects, Platform Teams and Product Teams to embed principles such as least privilege, data minimization and resilience into solutions. Turn lessons from assessments, penetration tests and incidents into improved standards, guardrails and engineering practices.

What does success look like in 1 year?

• Clear security engineering vision and direction. A clear and practical security vision for security engineering at Kramp is defined, communicated and understood across the organization. The vision is translated into the right security practices, principles, standards and ways of working for Product Teams and architects.
• Clear understanding of the current security landscape. Kramp has a clear view of its current security maturity, key gaps, priorities and required capabilities, with a tech vision for further improvement.
• Security embedded in daily operations: Development teams routinely include security practices in their day-to-day delivery, from design and implementation to CI/CD, vulnerability follow-up and operational decision-making.
• Earlier involvement in solution design: Security considerations are actively included during design and planning phases, helping teams establish the right security capabilities from the beginning (security-by-design).
• Visible improvement through guardrails and reporting: Security tooling, guardrails and reporting are actively used to improve coverage, ownership and prioritization of security risks across teams.

Who are you?

• Bachelor’s degree in Computer Science, Software Engineering, Cyber Security, or a related field.
• 7+ years of experience in software development, system implementation, application security, cyber security or a related role, with experience in a leading, advising or practice-oriented position.
• Experience defining or shaping a security engineering vision, strategy, practice or framework across multiple teams or an organization.
• Proven experience with security-by-design, vulnerability management, security assessments and security tooling across software, platforms or enterprise systems.
• Strong understanding of software development processes, SaaS solutions, cloud platforms, infrastructure, integrations, APIs and modern application architectures.
• Excellent communication, collaboration, facilitation and stakeholder-management skills.
• Ability to influence without direct authority and drive adoption of standards, practices and organizational change across multiple teams.

Primary workplace is Utrecht, with willingness to travel to Varsseveld approximately 1-2 times per month.

What do we offer?

At Kramp, we believe meaningful rewards help people grow, perform, and thrive. Our reward package is designed to be fair, transparent, and competitive, giving you confidence and support to do your best work.

We offer an attractive salary of €6,597 - €8,063 gross per month, depending on your experience and qualifications.

• 25 vacation days and 12 ADV days (based on a fulltime contract)
• Flexible working policy in hours and location
• Travel- and working from home allowance
• Profit sharing bonus
• Budget for training and courses
• Generous pension plan

About Us

Thanks to our ambitions we are active throughout Europe: a leading position in the agricultural market for parts. We heavily invest in E-Business and innovations. Our aim is to make it easy for our customers to run their business. Working at Kramp means working with over 3500 international colleagues. The people at Kramp are enthusiastic, professional, and involved. We speak our customers’ language, understand their challenges, and earn their trust to exceed their expectations. Our promise “It’s that easy” is embedded in our culture and DNA.

Working At Kramp Means

… you belong here! Being part of our open business community

… your work makes a difference! Have an impact on what matters

… you will develop and realize ! Learn and realize your potential

More about Kramp: https://www.careeratkramp.com/nl-nl

Utrecht (NL)

Location:

Varsseveld (NL)