Security Engineer

Stack

Responsibilities

• ▹Plan and help execute penetration tests on web apps, APIs, and cloud infrastructure; manage external pentest engagements
• ▹Embed security across the full SDLC: threat modeling, security assessments, vulnerability remediation
• ▹Own and evolve cloud security posture across AWS using Wiz (CSPM, CNS, Code, AI Security)
• ▹Champion security controls in CI/CD pipelines: IaC scanning, SAST integration, secure deployment
• ▹Support security incident response: investigation, containment, post-incident review
• ▹Translate compliance requirements (SOC2, ISO 42001, GDPR) into technical controls; support customer security discussions
• ▹Conduct vendor and third-party security risk assessments; advise on AI/ML security risks

Requirements

• ▹3-7 years hands-on experience in application security, cloud security (AWS), or a broad security engineering role
• ▹Proven experience conducting penetration tests on web apps, APIs, and/or cloud environments
• ▹Solid understanding of AWS security: IAM, VPC design, cloud-native architecture
• ▹Familiarity with SAST/DAST tools and DevSecOps practices
• ▹Strong communication skills to explain security risks to technical and non-technical stakeholders
• ▹Growth mindset and genuine curiosity

Nice to have

• ▹Hands-on experience with Wiz or other CSPM/CNAPP platforms
• ▹OSCP or similar offensive security certification, or bug bounty contributions
• ▹Experience with AI/ML security risks and frameworks (OWASP LLM Top 10, MITRE ATLAS)
• ▹Personal GitHub with automation or research projects
• ▹Experience with Terraform or IaC security scanning
• ▹Hands-on Kubernetes and container security experience
• ▹Familiarity with programming languages (Python, Java, Scala) to support code reviews

Soft skills

What we offer

• ▹Flat organization with tangible impact
• ▹Work-from-home flexibility, weekly office time in Rotterdam and Amsterdam
• ▹Competitive salary and benefits
• ▹Unlimited vacation policy
• ▹Apple gear, daily lunch, team events

About the company

Bynder is a leading digital asset management (DAM) platform trusted by global brands such as Spotify, Campari, and Lacoste, leading the shift from management to AI-powered content orchestration.