Security Engineer at Sogelink

As a Security Engineer at the Sogelink, you support the developers of Geodan and GOconnectIT. You have a diverse agenda. You will implement security testing tools for new applications and you will coordinate penetration tests and security scans of our SaaS applications. You'll also share your expertise and best practices in application design if it comes to security.

You work in an environment in which we consider collegiality and job satisfaction very important. We enjoy learning from each other and your expertise as a  Security Engineer will therefore be most appreciated.

As a security engineer you will be part of our IT department. You will ensure security by design by sharing your recommendations with our software developers, architects and test engineers. You assist in security implementation and help with risk assessments. Your activities furthermore include:

• Performing risk analyzes and make recommendations for our SaaS applications;
• Technical analysis and prioritization of security incidents and of pen testing results;
• Support the teamlead of the IT department on security matters;
• Promote security awareness via masterclasses or workshops.

• 3+ years of application security experience, preferably with SaaS applications;
• Thorough knowledge of IT standards, application- and network techniques and public and private cloud solutions;
• Experience with application security penetration testing and performing static and dynamic application security assessments (SAST/DAST);
• Some knowledge of the main software languages that we use (Java, .Net, Typescript and Python);
• Familiarity with the Software Development LifeCycle (SDLC) and associated tools (such as Git, Jenkins, Jira);
• Thorough knowledge of common vulnerabilities in applications, including the OWASP Top 10;
• Strong analytical skills, creative in finding solutions, good communicative skills.

• have some experience with securing Docker, Kubernetes or other containerization technology;
• Have knowledge of 3rd party library security tools (such as Black Duck, Veracode SCA or other software composition analysis technology);

• A challenging position at the market leader in geo-ICT;
• An inspiring working atmosphere and skilled colleagues;
• Attractive benefits and flexibility;
• Plenty of time to keep developing your skills, for example through e-learning (Udemy);
• Working from one of our offices and remote;
• The ability to help our customers with solutions that make a difference.