Your team

The Security Champion works closely with both development and security teams to help integrate the requirements of the OWASP SAMM framework. You will be responsible for monitoring security best practices, promoting security improvement activities and ensuring your team is up to date with the latest security trends and developments.

As Security Champion, you will be expected to have a good understanding of the development process and be familiar with the pain points of your team's codebase and culture. You will be responsible for presenting security in a way that resonates directly with the development team and improving communication between the development and security team.

At Nedap Healthcare, we offer a dynamic and innovative work environment with opportunities for growth and development. If you have a passion for security and a desire to make a difference, we would love to hear from you. Apply now to join our team and help us secure the future of healthcare.

Required experience and skills

Responsibilities:

• Support development teams on application security, including threat modelling and application security assessments;
• Participate in security guild meetings to share best practices with other security champions and increase your security knowledge by attending security courses and hands-on hacking classes;
• Reproduce, investigate and address application security vulnerabilities - whether found on your own or reported through our bug bounty programme;
• Conduct security-focused code reviews;
• Support the preparation and release of security patches;
• Assist in the development of security pipelines and other tooling that prevent or detect security issues.

You must have:

• Development or scripting experience and skills. Ruby on Rails and/or Java are preferred;
• Able to work well within software development teams;
• Able to prioritise security-related work while keeping in touch with domain-related knowledge and needs;
• Communication skills and ability to explain complex topics in a clear and concise manner; ability to explain common security flaws.

Nice to have:

• Experience in identifying security issues through code review;
• Familiarity with a number of standard security libraries and tools (e.g. static analysis tools, penetration testing tools, etc.);
• Familiarity with common security vulnerabilities and ways to address them (e.g. OWASP Top 10);
• Basic knowledge of network and web-related protocols (e.g. TCP/IP, HTTP and TLS).