Security Practice Lead

• Clear security engineering vision and direction. A clear and practical security vision for security engineering at Kramp is defined, communicated and understood across the organization. The vision is translated into the right security practices, principles, standards and ways of working for Product Teams and architects.
• Clear understanding of the current security landscape. Kramp has a clear view of its current security maturity, key gaps, priorities and required capabilities, with a tech vision for further improvement.
• Security embedded in daily operations:
  Development teams routinely include security practices in their day-to-day delivery, from design and implementation to CI/CD, vulnerability follow-up and operational decision-making.
• Earlier involvement in solution design:
  Security considerations are actively included during design and planning phases, helping teams establish the right security capabilities from the beginning (security-by-design).
• Visible improvement through guardrails and reporting:
  Security tooling, guardrails and reporting are actively used to improve coverage, ownership and prioritization of security risks across teams.

Define and continuously develop Kramp’s security Engineering vision by assessing current maturity, identifying gaps and defining the security practices and capabilities needed. Translate the vision into clear principles, standards and practical guidance for Product Teams.

Define and drive consistent adoption of security tooling and guardrails, including CI/CD controls, and ensure teams understand how to respond to security findings or blocked changes.

Ensure Product Teams act on findings from Sonar Qube, Dependabot, security scans and penetration tests. Improve coverage, ownership, and follow-up, and translate recurring findings into preventive controls. Escalate unresolved risks to the Security Team.

Enable Product Teams through workshops and hands‑on guidance, strengthening security ownership and helping teams efficiently prioritise and address vulnerabilities.

Define meaningful security metrics and dashboards, communicate risks and trends, and drive action through transparent reporting to Product Teams and management.

Collaborate with architects, Platform Teams and Product Teams to embed principles such as least privilege, data minimisation and resilience into solutions. Turn lessons from assessments, penetration tests and incidents into improved standards, guardrails and engineering practices.

Bachelor’s degree in Computer Science, Software Engineering, Cyber Security, or a related field.

7+ years of experience in software development, system implementation, application security, cyber security or a related role, with experience in a leading, advising or practice-oriented position.

Experience defining or shaping a security engineering vision, strategy, practice or framework across multiple teams or an organisation.

Proven experience with security‑by‑design, vulnerability management, security assessments and security tooling across software, platforms or enterprise systems.

Strong understanding of software development processes, SaaS solutions, cloud platforms, infrastructure, integrations, APIs and modern application architectures.

Excellent communication, collaboration, facilitation and stakeholder‑management skills.

Ability to influence without direct authority and drive adoption of standards, practices and organisational change across multiple teams.

We offer an attractive salary of €6,597 - €8,063 gross per…