Principal Information Security Engineer

As a Security Analyst, you oversee incoming security vulnerability reports from our researchers' community, while continuously sharpening your cybersecurity skills. All of this happens through dedicated interaction with the researcher's community and with the goal of offering the best possible service to both companies and researchers.

We are open to candidates based remotely across the European Union only. Unfortunately, no other locations will the considered at this time.

what you’ll be doing

Challenge and support both researchers and security teams using your entire security skillset.
Research, POC and evaluate reports that come in through our platform (make sure they're unique, concrete & actionable for our clients).
Handling escalations of tickets and researcher mediation.
Mentoring and coaching more junior team members.
Proactively flag tickets that present an escalation risk.
Track changes in the team’s workload and prioritize accordingly.
Assess the severity of reported issues in relation to how they can disrupt business, including the financial and managerial implications.
Familiarity with and ability to calculate CVSS ratings.
Review and provide feedback on reports in a constructive and supportive manner.
Motivate and engage security researchers to continuously outperform themselves.
Build a positive relationship with our community, and customers in close collaboration with success management.
Provide remediation advice and help customers make the most value out of received reports.
Proactively identify and solve issues, as well as accept and quickly respond to delegated work.
Communicate, document, and share your findings.
Stay updated on the latest malware and security threats.
Perform penetration tests and security validation on computer systems, networks and applications.
Create new testing methods to identify vulnerabilities.

what you’ll bring

Outstanding interpersonal abilities, and strong written and verbal communication skills.
Fluent in English, both written and spoken. Dutch language skills is a big plus.
At least 2 years of relevant experience within pen testing, security testing, or vulnerability assessments.
Stress resistant & you can keep a clear focus on the resolution in an incident-context.
A strong understanding of the (Ethical) Hacker culture and the Bug Bounty community.
Attention to detail, analytical and problem-solving capabilities.
Able to independently find solutions to both technical and non-technical problems with no apparent answer (aggressive googling, stack overflow, etc).
Flexible working hours, willing to take part in a 24x7 support organization.
Positive service-oriented personality.
Proven technology skills.
- Proficient with Mac, Windows, Linux.
- OWASP top 10 knowledge.
- Web application security knowledge.
- Mobile application security knowledge.

Nice to haves

Your very own bug bounty profile.
CEH, CPT, CEPT, CPEN, OSWE, OSWA, EWPT or EWPTX certificates are a plus.

what is in it for you?

✅ Competitive salary

✈️ 2-months work abroad policy

⭕ Hybrid working model

⌨️ Initial home office budget
✍ Great training and yearly learning budget
⛹ Social activities and team outings
✨ Referral bonus
⚡ Great hardware and access to the best tools to be successful in your role

All other benefits will be relative to your location.

why join us?

Here are some great benefits of joining our team:

Cybersecurity is a great place to be! The security industry is fast-paced and continues to grow even during times of economic uncertainty.
We provide a clear career path and learning budget to help set you up for success.
Join a company that’s making a real impact. In addition to our sustainability goals, we empower ethical hackers from all backgrounds to earn a living.
Be yourself! Our international team celebrates individuality and places a strong focus on diversity and inclusion.
We are the proud winners of the Deloitte Rising Star award in 2020, the Deloitte Fast 50 award in 2021 and Security Innovation of the Year 2025 at the UK IT Industry awards.
We’re backed by top investors who are enabling us to grow internationally.

Originally posted on Himalayas

Job Description

your mission

what you’ll be doing

Challenge and support both researchers and security teams using your entire security skillset.
Research, POC and evaluate reports that come in through our platform (make sure they're unique, concrete & actionable for our clients).
Handling escalations of tickets and researcher mediation.
Mentoring and coaching more junior team members.
Proactively flag tickets that present an escalation risk.
Track changes in the team’s workload and prioritize accordingly.
Assess the severity of reported issues in relation to how they can disrupt business, including the financial and managerial implications.
Familiarity with and ability to calculate CVSS ratings.
Review and provide feedback on reports in a constructive and supportive manner.
Motivate and engage security researchers to continuously outperform themselves.
Build a positive relationship with our community, and customers in close collaboration with success management.
Provide remediation advice and help customers make the most value out of received reports.
Proactively identify and solve issues, as well as accept and quickly respond to delegated work.
Communicate, document, and share your findings.
Stay updated on the latest malware and security threats.
Perform penetration tests and security validation on computer systems, networks and applications.
Create new testing methods to identify vulnerabilities.

what you’ll bring

Outstanding interpersonal abilities, and strong written and verbal communication skills.
Fluent in English, both written and spoken. Dutch language skills is a big plus.
At least 2 years of relevant experience within pen testing, security testing, or vulnerability assessments.
Stress resistant & you can keep a clear focus on the resolution in an incident-context.
A strong understanding of the (Ethical) Hacker culture and the Bug Bounty community.
Attention to detail, analytical and problem-solving capabilities.
Able to independently find solutions to both technical and non-technical problems with no apparent answer (aggressive googling, stack overflow, etc).
Flexible working hours, willing to take part in a 24x7 support organization.
Positive service-oriented personality.
Proven technology skills.
- Proficient with Mac, Windows, Linux.
- OWASP top 10 knowledge.
- Web application security knowledge.
- Mobile application security knowledge.

Nice to haves

Your very own bug bounty profile.
CEH, CPT, CEPT, CPEN, OSWE, OSWA, EWPT or EWPTX certificates are a plus.

what is in it for you?

✅ Competitive salary

✈️ 2-months work abroad policy

⭕ Hybrid working model

why join us?

Here are some great benefits of joining our team:

Cybersecurity is a great place to be! The security industry is fast-paced and continues to grow even during times of economic uncertainty.
We provide a clear career path and learning budget to help set you up for success.
Join a company that’s making a real impact. In addition to our sustainability goals, we empower ethical hackers from all backgrounds to earn a living.
Be yourself! Our international team celebrates individuality and places a strong focus on diversity and inclusion.
We are the proud winners of the Deloitte Rising Star award in 2020, the Deloitte Fast 50 award in 2021 and Security Innovation of the Year 2025 at the UK IT Industry awards.
We’re backed by top investors who are enabling us to grow internationally.

Originally posted on Himalayas

Job Description

your mission

what you’ll be doing

Challenge and support both researchers and security teams using your entire security skillset.
Research, POC and evaluate reports that come in through our platform (make sure they're unique, concrete & actionable for our clients).
Handling escalations of tickets and researcher mediation.
Mentoring and coaching more junior team members.
Proactively flag tickets that present an escalation risk.
Track changes in the team’s workload and prioritize accordingly.
Assess the severity of reported issues in relation to how they can disrupt business, including the financial and managerial implications.
Familiarity with and ability to calculate CVSS ratings.
Review and provide feedback on reports in a constructive and supportive manner.
Motivate and engage security researchers to continuously outperform themselves.
Build a positive relationship with our community, and customers in close collaboration with success management.
Provide remediation advice and help customers make the most value out of received reports.
Proactively identify and solve issues, as well as accept and quickly respond to delegated work.
Communicate, document, and share your findings.
Stay updated on the latest malware and security threats.
Perform penetration tests and security validation on computer systems, networks and applications.
Create new testing methods to identify vulnerabilities.

what you’ll bring

Outstanding interpersonal abilities, and strong written and verbal communication skills.
Fluent in English, both written and spoken. Dutch language skills is a big plus.
At least 2 years of relevant experience within pen testing, security testing, or vulnerability assessments.
Stress resistant & you can keep a clear focus on the resolution in an incident-context.
A strong understanding of the (Ethical) Hacker culture and the Bug Bounty community.
Attention to detail, analytical and problem-solving capabilities.
Able to independently find solutions to both technical and non-technical problems with no apparent answer (aggressive googling, stack overflow, etc).
Flexible working hours, willing to take part in a 24x7 support organization.
Positive service-oriented personality.
Proven technology skills.
- Proficient with Mac, Windows, Linux.
- OWASP top 10 knowledge.
- Web application security knowledge.
- Mobile application security knowledge.

Nice to haves

Your very own bug bounty profile.
CEH, CPT, CEPT, CPEN, OSWE, OSWA, EWPT or EWPTX certificates are a plus.

what is in it for you?

✅ Competitive salary

✈️ 2-months work abroad policy

⭕ Hybrid working model

why join us?

Here are some great benefits of joining our team:

Cybersecurity is a great place to be! The security industry is fast-paced and continues to grow even during times of economic uncertainty.
We provide a clear career path and learning budget to help set you up for success.
Join a company that’s making a real impact. In addition to our sustainability goals, we empower ethical hackers from all backgrounds to earn a living.
Be yourself! Our international team celebrates individuality and places a strong focus on diversity and inclusion.
We are the proud winners of the Deloitte Rising Star award in 2020, the Deloitte Fast 50 award in 2021 and Security Innovation of the Year 2025 at the UK IT Industry awards.
We’re backed by top investors who are enabling us to grow internationally.

Originally posted on Himalayas

Job Description

your mission

what you’ll be doing

Challenge and support both researchers and security teams using your entire security skillset.
Research, POC and evaluate reports that come in through our platform (make sure they're unique, concrete & actionable for our clients).
Handling escalations of tickets and researcher mediation.
Mentoring and coaching more junior team members.
Proactively flag tickets that present an escalation risk.
Track changes in the team’s workload and prioritize accordingly.
Assess the severity of reported issues in relation to how they can disrupt business, including the financial and managerial implications.
Familiarity with and ability to calculate CVSS ratings.
Review and provide feedback on reports in a constructive and supportive manner.
Motivate and engage security researchers to continuously outperform themselves.
Build a positive relationship with our community, and customers in close collaboration with success management.
Provide remediation advice and help customers make the most value out of received reports.
Proactively identify and solve issues, as well as accept and quickly respond to delegated work.
Communicate, document, and share your findings.
Stay updated on the latest malware and security threats.
Perform penetration tests and security validation on computer systems, networks and applications.
Create new testing methods to identify vulnerabilities.

what you’ll bring

Outstanding interpersonal abilities, and strong written and verbal communication skills.
Fluent in English, both written and spoken. Dutch language skills is a big plus.
At least 2 years of relevant experience within pen testing, security testing, or vulnerability assessments.
Stress resistant & you can keep a clear focus on the resolution in an incident-context.
A strong understanding of the (Ethical) Hacker culture and the Bug Bounty community.
Attention to detail, analytical and problem-solving capabilities.
Able to independently find solutions to both technical and non-technical problems with no apparent answer (aggressive googling, stack overflow, etc).
Flexible working hours, willing to take part in a 24x7 support organization.
Positive service-oriented personality.
Proven technology skills.
- Proficient with Mac, Windows, Linux.
- OWASP top 10 knowledge.
- Web application security knowledge.
- Mobile application security knowledge.

Nice to haves

Your very own bug bounty profile.
CEH, CPT, CEPT, CPEN, OSWE, OSWA, EWPT or EWPTX certificates are a plus.

what is in it for you?

✅ Competitive salary

✈️ 2-months work abroad policy

⭕ Hybrid working model

why join us?

Here are some great benefits of joining our team:

Cybersecurity is a great place to be! The security industry is fast-paced and continues to grow even during times of economic uncertainty.
We provide a clear career path and learning budget to help set you up for success.
Join a company that’s making a real impact. In addition to our sustainability goals, we empower ethical hackers from all backgrounds to earn a living.
Be yourself! Our international team celebrates individuality and places a strong focus on diversity and inclusion.
We are the proud winners of the Deloitte Rising Star award in 2020, the Deloitte Fast 50 award in 2021 and Security Innovation of the Year 2025 at the UK IT Industry awards.
We’re backed by top investors who are enabling us to grow internationally.

Originally posted on Himalayas