Technical Lead - Product Security

Mendix is a low-code app development platform:First, what is low-code? Low-code is a visual approach to software development that enables you to abstract and automate every step of the application lifecycle. Gartner predicts that “by 2024, low-code application development will be responsible for more than 65% of application development activity.” Mendix is repeatedly ranked a Leader in analyst reports from Gartner and Forrester. In the 2021 Gartner® Magic Quadrant for Multiexperience Development Platforms, Mendix placed at the very top of the Leaders quadrant.  Mendix, the global leader in enterprise low-code, was created to promote collaboration between Business & IT teams. Thousands of forward-thinking companies around the world like Ford Auto, Rabobank Netherlands, Zurich Insurance, and Red Bull, can unleash their best ideas faster with the help of the Mendix Platform.   Mendix is a Siemens Business: Siemens is a Top 10 Global Software Company and a leader on Fast Company’s Most Innovative Companies in the World! With the acquisition of Mendix in 2018, Siemens Digital Industries Software is driving transformation to enhance the digital enterprise where engineering, manufacturing and electronics meet the future of innovation. Mendix employees have the opportunity to work in a hyper-growth environment with the support of Siemens’ unbeatable market position and resources. Mendix is recruiting for a Technical Lead to join the Product Security team at our Rotterdam, Netherlands office.The successful candidate will be responsible for:Providing security expertise in the analysis, assessment, development, and evaluation of security solutions for application development, delivery and operations in a cloud-based(SaaS, PaaS, etc.) environment Collaborate with architects, engineers, product management and other internal stakeholders to deliver creative and pragmatic solutions to difficult security and technology challenges and requirementsDesign and coordinate solid responses to security events that involve multiple teams across the organization, driving continuous improvements from these eventsTriage security issues and engage with stakeholders to ensure timely and effective remediation Manage tools related to cloud technology and monitoring, which play a vital role in protecting our and our customers’ dataAutomate security controls and processes to provide improved metrics and security operations Instill best practices in - and share knowledge on - security engineering throughout the entire organization with regards to development, cryptography, network security, security operations, incident response and security intelligence

Role Requirements:

• Ideally a Bachelor’s degree in Computer Science or comparable experience and knowledge
• Deep knowledge and demonstrated background in cloud security, application security and threat landscape in complex enterprise environments
• Comprehensive experience with virtualization technologies and cloud provider ecosystems like AWS
• Good understanding of fundamental technologies, including networking, web technology, and general security principles(cryptography, forensics, etc.)
• Excellent communicator in English, both written and spoken while being able to convey information effectively at multiple levels of sensitivity and for various audiences
• High level of initiative and self-direction, while collaborating in a team to achieve your group’s goals
• Ability to think and approach situations from all angles, whether it’s as an attacker, a defender or a builder
• An independent and active security certification like Certified Cloud Security Professional(CCSP) is a plus
• Working for Mendix and with our Customers means your reliability has to be beyond any doubt, and therefore every employment is subject to a onboarding screening and the condition precedent a Certificate of Conduct is provided that demonstrates you did not commit any offences that are relevant to the performance of your function.

#LI-PN1