Senior Security Engineer, Fortanix (Eindhoven, Netherlands, hybrid)

About Fortanix:  

In today's world, where data spreads across various clouds and devices, traditional security measures aren't enough. Businesses need a dynamic approach to defend against constant cyber threats and ensure agile data security. Fortanix leads the way in data-centric cybersecurity for hybrid multicloud environments, using advanced cryptography, encryption, and confidential AI solutions.  

As data breaches become more frequent and traditional defenses fall short, we focus on data exposure management to keep your information safe. Our unified data security platform addresses vulnerabilities in hybrid multicloud environments, defends against threats, and makes it easier to discover, assess, and fix data exposure risks. Whether implementing a Zero Trust model or preparing for the post-quantum computing era, we help businesses worldwide protect their most sensitive data, wherever it is. 

Our commitment to solving the world’s toughest data security challenges has earned Fortanix multiple Cybersecurity Excellence and Innovation Awards, as well as recognition from industry giants such as NVIDIA, Microsoft, Intel, ServiceNow, and Snowflake. 

Our team includes industry leaders and cryptography experts, creating a culture of trust, innovation and collaboration where every voice is valued. Recognized as a Great Place to Work, we're looking for passionate individuals to help us shape the future of data security and work towards a safer digital future. 

Senior Security Engineer

We are looking for a Senior Security Engineer to help strengthen the security of our products, infrastructure, and engineering practices. This is a hands-on role with the opportunity to help shape and grow our Product & Infrastructure Security function while working closely with our R&D teams.

You’ll dig into complex technical systems, identify vulnerabilities before they become problems, build and improve security tooling, and help embed security into how we design, build, and deploy our products.

What You’ll Do

• Help build and evolve our Product & Infrastructure Security function, practices, and tooling.
• Define, codify, and implement security best practices across our engineering organization.
• Review architecture, documentation, source code, and deployments to identify security vulnerabilities and design weaknesses.
• Use, develop, and automate tools to identify and analyze security vulnerabilities.
• Partner with engineering teams to investigate security issues and drive effective remediation.
• Participate in peer code reviews to improve the security and quality of our products.
• Communicate with customers, researchers, vendors, and other third parties regarding security issues.
• Help build a strong security culture through collaboration, technical guidance, and knowledge sharing.

What You’ll Need

• 5+ years of relevant security engineering experience, with a demonstrated track record of identifying and addressing security vulnerabilities.
• Advanced Python programming skills — required.
• Strong understanding of application, product, and/or infrastructure security principles.
• Familiarity with security controls and services across AWS, Azure, or GCP.
• Strong analytical and technical problem-solving skills.
• Excellent written and verbal communication skills.
• Bachelor’s degree in Computer Science, Information Systems, or a related field, or equivalent practical experience.
• Current residence in the EU with valid authorization to work in the EU.

You Are Someone Who

• Demonstrates uncompromising integrity and sound judgment.
• Has strong attention to detail and a security-focused mindset.
• Enjoys investigating complex technical problems and understanding how systems can fail or be exploited.
• Can operate independently and take ownership while collaborating effectively with engineering teams.
• Is comfortable challenging assumptions and advocating for strong security practices.

Preferred Qualifications

• Hands-on experience with penetration testing, vulnerability research, or offensive security.
• Ability to analyze code written in Rust, C/C++, or Go.
• Security certifications such as OSCP, GSEC/GIAC, SSCP, or CEH.
• Experience supporting security and compliance assessments against frameworks such as PCI DSS, ISO 27001, and SOC 2, and regulations such as GDPR and DORA.

• Equity: Stock options grant 

• 25 Paid Vacation Days 

• A week off between Christmas and New Year’s Day 

• 40 hours of paid volunteer time off 

• 8% holiday allowance 

• Pension plan with matching contributions up to 5% 

• Hybrid work model 

• Office beverages and snacks; Lunch allowance 

• Quarterly social events 

• Monthly internet allowance 

• Commuting Reimbursement 

• Coursera access for Learning and Development