Senior Software Security Engineer (f/m/div.)

As a Software Security Engineer, you'll be a key player in protecting Bosch's digital assets. You will design and implement a cutting-edge vulnerability management system, ensuring the security of our software and safeguarding our customers. Beyond that, you'll act as a security consultant and coach, sharing your expertise with other development teams to foster a culture of secure coding practices throughout Bosch. You'll collaborate with a diverse, international team spanning the Netherlands, Germany, Portugal, and India, providing critical support to software development teams and stakeholders as they integrate our robust security methods into their development workflows.

Your contribution to something big:

• Support product teams to create secure products/systems during their complete product life cycle
• Pro-active supporting the organization on rolling-out the cyber security risk framework
• Provide consulting and coaching to software development teams on security best practices and vulnerability remediation.
• Support the organization to be compliant with upcoming security legislations
• Assess the security of Web Applications, Mobile Applications, embedded systems and cloud based product backends
• Conduct security audits
• Provide recommendations based on security assessments
• Establish and refine processes and methods for identifying software vulnerabilities.
• Automate vulnerability assessment and scoring within CI/CD pipelines for rapid and efficient security analysis.

What distinguishes you: 

• Education: Bachelor's or Master's degree in Software Engineering, Computer Science, Cybersecurity, or a related field.
• Experience: Minimum of 5 years of experience in software development with focus on cyber security and/or security auditing. Experience with vulnerability scanning or CI/CD/CD-related development is desirable.
• Know-how:
  • Proficiency in vulnerability assessment methodologies and tools.
  • Knowledge of technical systems and terminology.
  • Knowledge of software security principles and best practices.
  • Ability to write clear and concise documentation.
  • Optionally: security related certifications like CISA, CSSP, CISSP, OSCP or AWS/Azure Certified Engineer
• Languages: Excellent written and oral communication skills in English (required).
• Working Style and Methods:
  • Familiarity with Agile development methodologies.
  • Experience with DevOps principles.
  • Strong problem-solving and analytical skills.
• Personality:
  • Proactive and self-motivated with a strong sense of ownership.
  • A collaborative team player with excellent communication skills and the ability to mentor others.
  • Eager to learn and adapt to new technologies and security landscapes.