Security Practice Lead

KH01 Kramp Groep B.V.; Utrecht; On-site; EUR 74,000 - 90,000; Full time

Benefits offered by this job

25 vacation days

Flexible working policy

Travel allowance

Profit sharing bonus

Training budget

Generous pension plan

Job summary

Kramp Groep B.V. is seeking a senior Security Engineer to shape and drive Kramp’s security engineering vision across product teams.

You will embed security-by-design, oversee vulnerability management, and implement guardrails for CI/CD tooling, ensuring ongoing risk-based decisions. You will collaborate with architects, platform teams, and product teams to translate security principles into practical guidance, KPIs and improvements.

Qualifications

• Bachelor’s degree required in a relevant field.
• 7+ years of experience in software development or security roles.
• Experience defining or shaping a security engineering vision across multiple teams.
• Strong understanding of modern application architectures and SaaS solutions.
• Excellent communication and stakeholder-management skills.

Responsibilities

• Define and continuously develop Kramp’s security engineering vision and principles.
• Define guardrails and tooling, including CI/CD controls, with clear response to findings.
• Oversee vulnerability management from findings to preventive controls.
• Enable Secure Ways of Working through workshops and guidance.
• Define meaningful security metrics and dashboards and report to teams and management.
• Collaborate with architects and product teams to embed security principles in solutions.

Skills

Security strategy

Security architecture

Vulnerability management

Security tooling

Cloud platforms

Software development processes

Communication & stakeholder management

Influence without authority

Education

Bachelor’s degree in Computer Science, Software Engineering, Cyber Security, or a related field

Tools

CI/CD tooling

SonarQube

Dependabot

Security assessments tooling

Job description

What does success look like in 1 year?

• Clear security engineering vision and direction. A clear and practical security vision for security engineering at Kramp is defined, communicated and understood across the organization. The vision is translated into the right security practices, principles, standards and ways of working for Product Teams and architects.
• Clear understanding of the current security landscape. Kramp has a clear view of its current security maturity, key gaps, priorities and required capabilities, with a tech vision for further improvement.
• Security embedded in daily operations: Development teams routinely include security practices in their day-to-day delivery, from design and implementation to CI/CD, vulnerability follow-up and operational decision-making.
• Earlier involvement in solution design: Security considerations are actively included during design and planning phases, helping teams establish the right security capabilities from the beginning (security-by-design).
• Visible improvement through guardrails and reporting: Security tooling, guardrails and reporting are actively used to improve coverage, ownership and prioritization of security risks across teams.

Security Engineering Vision and Principles.

Define and continuously develop Kramp’s security Engineering vision by assessing current maturity, identifying gaps and defining the security practices and capabilities needed. Translate the vision into clear principles, standards and practical guidance for Product Teams.

Security Guardrails and Tooling.

Define and drive consistent adoption of security tooling and guardrails, including CI/CD controls, and ensure teams understand how to respond to security findings or blocked changes.

Vulnerability Management.

Ensure Product Teams act on findings from SonarQube, Dependabot, security scans and penetration tests. Improve coverage, ownership, and follow-up, and translate recurring findings into preventive controls. Escalate unresolved risks to the Security Team.

Secure Ways of Working.

Enable Product Teams through workshops and hands‑on guidance, strengthening security ownership and helping teams efficiently prioritise and address vulnerabilities.

Security Reporting.

Define meaningful security metrics and dashboards, communicate risks and trends, and drive action through transparent reporting to Product Teams and management.

Security Architecture & Improvement.

Collaborate with architects, Platform Teams and Product Teams to embed principles such as least privilege, data minimisation and resilience into solutions. Turn lessons from assessments, penetration tests and incidents into improved standards, guardrails and engineering practices.

Who are you?

Bachelor’s degree in Computer Science, Software Engineering, Cyber Security, or a related field.

7+ years of experience in software development, system implementation, application security, cyber security or a related role, with experience in a leading, advising or practice-oriented position.

Experience defining or shaping a security engineering vision, strategy, practice or framework across multiple teams or an organisation.

Proven experience with security‑by‑design, vulnerability management, security assessments and security tooling across software, platforms or enterprise systems.

Strong understanding of software development processes, SaaS solutions, cloud platforms, infrastructure, integrations, APIs and modern application architectures.

Excellent communication, collaboration, facilitation and stakeholder‑management skills.

Ability to influence without direct authority and drive adoption of standards, practices and organisational change across multiple teams.

What do we offer?

We offer an attractive salary of €6,597 - €8,063 gross per month, depending on your experience and qualifications.

• 25 vacation days and 12 ADV days (based on a fulltime contract)
• Flexible working policy in hours and location
• Travel‑ and working from home allowance
• Profit sharing bonus
• Budget for training and courses
• Generous pension plan

Do you want to join us?

In case you feel challenged by the above role description and requirements, we are interested in meeting you!

Do you have a question about this role? Please do not hesitate to contact Julia, the Talent Acquisition Specialist, [e-mail]

About us

Thanks to our ambitions we are active throughout Europe: a leading position in the agricultural market for parts. We heavily invest in E-Business and innovations. Our aim is to make it easy for our customers to run their business. Working at Kramp means working with over 3500 international colleagues. The people at Kramp are enthusiastic, professional, and involved. We speak our customers’ language, understand their challenges, and earn their trust to exceed their expectations. Our promise “It’s that easy” is embedded in our culture and DNA. Working at Kramp means: … you belong here! Being part of our open business community … your work makes a difference! Have an impact on what matters … you will develop and realise! Learn and realise your potential.

More about Kramp: https://www.careeratkramp.com/nl-nl

#LI-JB2 Utrecht (NL)

Location: Varsseveld (NL)

Primary workplace is Utrecht, with willingness to travel to Varsseveld approximately 1-2 times per month.