Principal Security Engineer at Storiogroup — Netherlands

← Back to job listings

About The Role

How you embrace curiosity daily.
-
Define security principles, standards, patterns, and guardrails that enable engineers to build securely at pace.
-
Provide hands on security expertise across APIs, microservices, cloud infrastructure, authentication, authorisation, and software supply chain security.
-
Lead threat modelling and security architecture reviews for important products and technology initiatives.
-
Partner with engineers, architects, and product teams to identify risks and develop pragmatic solutions.
-
Evolve our approach to application security, vulnerability management, and security throughout the development lifecycle.
-
Build or enable automation that improves security outcomes while reducing friction for engineering teams.
-
Identify emerging security risks, including those introduced by AI, and drive appropriate mitigation.
How you make your mark.
-
Help establish the principles and practices that allow teams to move quickly while managing risk effectively.
-
Raise overall security capability across the engineering organisation by mentoring engineers and Security Champions.
-
Develop meaningful Product Security metrics and use them to drive continuous improvement.
-
Direct the technical direction of Product Security and influence how security is designed, built, and operated across our platform.
-
Communicate potential security risks and their impact to engineering and senior stakeholders.
-
Enable engineering teams to adopt AI securely and enhance productivity.
What you bring to the team.
-
Significant experience in Product Security, Application Security, or Security Engineering in a modern software engineering environment.
-
Strong experience with security architecture, threat modelling, and turning security concerns into practical engineering solutions.
-
Deep understanding of application and API security, secure development practices, and modern software architectures.
-
Experience securing cloud native applications, distributed systems, and embedding security into engineering workflows and the software development lifecycle.
-
Strong understanding of software supply chain security, dependency risk, and SBOMs.
-
Proven ability to influence multiple engineering teams, define security standards, and communicate effectively with senior technical stakeholders.
What sets you apart.
-
Experience with, or a strong interest in, AI security and using AI to improve security engineering.
-
Experience with Infrastructure as Code security, Security Champions, or Bug Bounty programmes.
-
Experience or formal qualifications in relevant security or cloud areas.