> Markdown version of [/jobs/ext/353961-security-engineer](https://www.wearedevelopers.com/jobs/ext/353961-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Engineer - **Company:** Haystack People - **Location:** Amersfoort, Netherlands (Remote available) - **Experience:** Expert - **Salary:** €6,000.0 - **Contract:** Permanent contract - **Skills:** .NET Framework, PHP (Programming Language), Artificial Intelligence, Amazon Web Services, Software as a Service, Cloud Computing Security, Cyber Security, Continuous Integration, Identity and Access Management, Systems Development Life Cycle, Phishing, Security Information and Event Management, Software Vulnerability Management, Software Security, Infrastructure Automation Frameworks, Static Application Security Testing - **Published:** June 4, 2026 - **Apply:** https://nl.indeed.com/viewjob?jk=e72559535ce70a47 ## About the Role Do you have experience in Security?, * At least 5 years of experience in cyber security, security engineering or IT security * Proven experience building a security function, not just maintaining one * Background in a SaaS environment or a similarly technical setting * Solid knowledge of network and cloud security, identity and access management, and security tooling * Hands-on experience with CI/CD, infrastructure as code and application security (.NET and/or PHP) * Experience with monitoring, incident response and vulnerability management * A relevant certification: CISSP, CISM, OSCP, CEH or AWS Security Specialty What sets you apart: * You can talk through real incidents: what happened, what you did and what came out of it * You understand how developers think and know how to work with them, not around them * You are comfortable working independently without a team around you from day one * You know your way around ISO 27001 and the EU AI Act and want to build on that knowledge ## Description This is a new position. The organisation runs four product teams working in PHP and .NET, a shared infrastructure team, and around 40 developers in total. Security is a growing priority and you will be the person who builds and owns that function. You report directly to the CTO and are the internal expert on cybersecurity. You work closely with IT and development to make security part of how things are built and run, not something that gets bolted on at the end. What you will be doing: * Run a baseline security assessment across cloud, identity, applications and endpoints * Write and publish core security policies: access control, incident response and vulnerability management * Implement a SIEM to improve threat detection and incident response * Set up a vulnerability management programme with defined SLAs * Strengthen CI/CD pipelines with secrets scanning, SAST and IaC scanning * Manage third-party risk: vendor inventory, classification and periodic reviews * Build a security awareness programme with quarterly phishing tests and role-based training * Work toward ISO 27001 readiness and demonstrable compliance with NIS2 and the EU AI Act * Embed security into the SDLC together with the development team ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [This Is Not Your Father's .NET](https://www.wearedevelopers.com/videos/967-this-is-not-your-father-s-net) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls) - [Hacking C# from the inside - how to do anything in NET](https://www.wearedevelopers.com/videos/117-hacking-c-from-the-inside-how-to-do-anything-in-net) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)