Security Engineer

ph3The role /h3 pYou carry out in-depth security assessments across a broad range of clients, from scale-ups and mid-market companies to enterprise organizations with business-critical software, as well as software systems in MA processes. Your work goes beyond automated scans. You think like an attacker, look into the source code, and build a complete picture of real exposure. /p pYour findings are presented to engineering teams, management, and – where relevant – investors and legal advisors. Clarity and impact matter just as much as technical depth. /p h3What will you do? /h3 ul liExecute code-guided penetration tests with full source code access, going deeper than any black-box approach can /li liPerform manual and automated penetration tests across applications, APIs and internal systems, following established methodologies including OWASP Top 10, SANS/CWE Top 25, WSTG and MASTG /li liConduct in-depth cloud configuration reviews and identify security risks in cloud environments /li liPerform recurring vulnerability assessments to identify and prioritize new exposures over time /li liApply SAST and DAST tooling and critically interpret results beyond what the tooling surfaces /li liTranslate findings into clear, risk-prioritized reports for engineering teams, boards and investors /li liParticipate in client debriefings to walk through findings, answer questions and support remediation decisions /li liContribute to the ongoing development of YieldDD's security methodologies and tooling, working with a combination of established industry tools and tooling developed in-house /li liContribute to YieldDD's positioning by sharing knowledge through tech sessions, training and speaking at industry events /li /ul h3What you bring /h3 pbMust-haves /b /p ul liAt least 3 years of experience in security assessments and penetration testing /li liProven experience with code-guided or white-box penetration testing specifically /li liAble to navigate an unfamiliar codebase quickly and independently under time pressure /li liKnowledge of commonly used (security) AI tooling /li liProficiency in both manual techniques and automated tooling /li liExperience with multiple programming languages /li liStrong written and verbal communication skills: your reports are clear and decision-ready for non-technical readers /li liFluency in Dutch and English, spoken and written /li /ul pbNice-to-haves /b /p ul liOSWE certification or equivalent /li liExperience with C# or Python /li liKnowledge of secure coding practices and common development anti-patterns /li liAffinity with MA context or due diligence /li liExperience in sectors such as SaaS, financial services or PE-backed software companies /li /ul h3What we offer /h3 ul li25 vacation days /li liLaptop and tooling of your choice /li liHybrid working: focus days from home, collaborative days at the office /li liPremium-free pension plan with survivors’ pension /li liBudget for training, certifications and personal development /li liA brand-new office in the Houtfabriek at Campus Werkspoor, a fully sustainable timber building that opened inApril 2026. The campus has a restaurant and gym, and padel courts are planned for later this year /li liA role with genuine breadth: as part of a growing firm, you will contribute to more than just your own specialty /li liActive support for certifications and specialization /li /ul h3About YieldDD /h3 pYieldDD is the specialist in software due diligence and cyber security for MA transactions, private equity investors, and organizations with business-critical software. From our office in Utrecht (Campus Werkspoor), we work with leading PE firms, MA advisors, and technology companies across the Benelux and Europe. /p pWe are a lean team of specialists who value directness, depth, and genuine ownership. Security at YieldDD is not about running scans; it is about understanding what is really at stake. /p h3How the process works /h3 ol liSend your CV and a short motivation /li liIntroductory meeting /li liAssignment or technical assessment /li liClosing interview /li liOffer /li /ol pExpected timeline: two to three weeks /p /p #J-18808-Ljbffr