Software Security Engineer

At FOSS, we are driven by a strong sense of purpose, and we hope you are too. By 2030, the world population will exceed 9 billion and the middle class will have doubled. This means we will need to be outstandingly smart about our global food production. FOSS is on a mission to enable the sustainable use of the planet’s food resources, and thus to the nutrition of the people of the world. As a global market leader, we contribute through innovative food analysis, which is used to secure food quality, reduce waste, and optimize food production. If that sounds like something you’d like to be a part of, read on!

What you will be doing

FOSS builds software in two very different places: the software for and in our analytical instruments, and the IQX cloud platform those instruments are connected to. Both ship to customers, and both are in scope for the EU Cyber Resilience Act and NIS2. What we do not currently have in FOSS, is someone who will make that software secure in the it is written, rather than how it is tested afterwards.

As our new Software Security Engineer, you will build secure development into how FOSS writes software in IQX and in R&D. You report to the Head of Information Security, which keeps the role independent of any single delivery organization and you daily work with the IQX department, SRE and, development teams across R&D.

Key responsibilities include:

• Own our static and composition analysis tooling, including SonarQube quality gates and exceptions. The goal is scanning that teams use, not a gate they work around
• Build secure development practice across IQX and R&D: coding guidance, code review, dependency and supply-chain hygiene, and security checks inside the CI/CD pipeline rather than beside it
• Provide security input into architecture and design decisions with the IQX Architect, SRE and R&D teams, early enough that it changes the design
• Own cloud security posture: Microsoft Defender for Cloud findings, secure score and recommendations, triaged into work that gets done
• Handle customer security questionnaires and assess the third-party components and vendors we depend on
• Triage vulnerabilities in our software, from scanning, our own penetration testing or outside reports, and drive what matters to closure with the teams that own the code
• Train and coach developers, so secure development becomes something the teams do rather than something one person checks

What we hope to see you bring

This role sits between security and engineering and only works if both sides take you seriously. If you are strong on most of it and interested in the rest, apply and tell us which is which.

• A solid grounding in application security - OWASP, secure SDLC, DevSecOps - and experience making it work inside real development teams
• A software engineering background. You have shipped production code and can discuss a finding with a developer as a peer. C#, Python, C, C++ or comparable
• Experience with SAST and SCA tooling such as SonarQube, including quality gate design and the judgement to grant an exception without hollowing out the gate
• Cloud security posture management, ideally Azure and Microsoft Defender for Cloud
• Enough working knowledge of the Cyber Resilience Act, NIS2 and GDPR to turn them into engineering requirements rather than policy text
• Credibility with developers, the ability to influence without direct authority, and the pragmatism to tell apart a control that improves security from one that only produces evidence
• Professional-level English. Danish is an advantage, not a requirement

Why choose FOSS?

You get two quite different software worlds in one role: a cloud platform under active development, and embedded software inside instruments that measure most of the world’s milk and grain. The role is new, the mandate is real, and it reports to the Head of Information Security rather than to a delivery team where security competes with the release date. We support relevant certification and training. The position is full-time at the FOSS Innovation Centre in Hillerød, with onsite presence and occasional travel.

We would love to hear from you!

Submit your application through the link below. Please note that only applications sent through the link will be considered. We review applications on an ongoing basis and encourage you to apply early. If you have any questions about the role, please contact Christian Ryge, Head of Information Security, at +45 2091 6692.

FOSS is committed to maintaining an inclusive and diverse culture. You can help us sustain an unbiased recruitment process by not including photo and age in your application.

About FOSS

Today, more than 8 billion people around the world are dependent on nutritional food. Tons of food being produced in a million different ways and under varying conditions, creating challenges all the way from field to fork. One of them, obviously, is the effect it has on climate change.

FOSS helps the world’s 100 biggest food companies, and more than 40,000 others around the world navigate exactly that with intelligent, data-driven and innovative analytical solutions. We are making sustainability a better business, and we’re doing so as the global market leader in our field – improving food quality, minimizing food waste, ensuring food safety, and securing fair payment.

Join a pioneering and innovative company in the food and agriculture industry. A company on a mission, with offices all around the world and 1,750 talented colleagues across 34 different countries.

Apply for job as Software Security Engineer in IT, Finance & Compliance