Security Software Engineer - IAM & Secure Tooling

Exact Software Germany GmbH; Delft; On-site; EUR 65,000 - 90,000; Full time

Job summary

Exact Software Germany GmbH in Delft seeks a software engineer focused on security operations to build secure tooling and IAM functionality, translating findings into fixes and contributing to defensive capabilities.

You will participate in structured security campaigns, validate vulnerabilities, and help the team shift security left. The role involves collaborating with engineers across languages and frameworks, communicating findings clearly and growing toward autonomy over time.

Qualifications

• Software engineer with real coding experience.
• Interest in application security and basics of pen testing (OWASP Top 10).
• Desire to understand how vulnerabilities are exploited and how attackers would use them.
• Basic threat modeling awareness and attack-surface thinking interest.
• Ability to read code across languages/frameworks.
• Clear, structured communication to engineers and non-technical stakeholders.
• Collaborative mindset with mentoring and growth toward autonomy.

Responsibilities

• Build secure tooling and playbooks to make secure software the default.
• Translate findings into concrete low-level fixes.
• Contribute to IAM functionality development.
• Participate in security campaigns: inventory, rank, investigate, report.
• Tackle low-level security issues and build tools to prevent insecure patterns.
• Improve shift-left security tooling and playbooks.
• Contribute to recurring scanning and testing, following up with engineering teams.

Skills

Software engineering background

Interest in application security

Threat modeling awareness

Communicating findings

Code reading across languages

Tools

Burp Suite

OWASP ZAP

Dependency tooling

Job description

Exact Software Germany GmbH in Delft seeks a software engineer focused on security operations to build secure tooling and IAM functionality, translating findings into fixes and contributing to defensive capabilities.

You will participate in structured security campaigns, validate vulnerabilities, and help the team shift security left. The role involves collaborating with engineers across languages and frameworks, communicating findings clearly and growing toward autonomy over time.