Do you want to join a global market leader in developing world-class digital solutions? FOSS is on a mission to enable the sustainable use of our planet’s agricultural resources. Our contribution is advanced food analytics - helping secure food quality, reduce waste, and optimize production. With decades of experience serving the world’s largest food companies, FOSS has unique insights and the ideal foundation to create software and systems that empower food analytics.
What you will be doing
FOSS instruments are increasingly connected, and IQX, our cloud platform, is where instruments, data and customers meet. Cloud security has been a priority at FOSS for years, and we run a mature information security management system certified to ISO/IEC 27001. As customers move more of their quality data onto IQX, and as the EU Cyber Resilience Act and NIS2 raise the bar for connected products, the security of the platform is central to the trust our customers place in us.
As our SaaS Security Engineer, you will be part of the Information Security team and report to the Head of Information Security, while most of your working week is spent inside IQX Operations, securing the IQX platform day to day. You will work closely with SRE, DevOps Engineers and the IQX Enterprise Architect in IQX Infrastructure, the software development teams in R&D, and coordinate with the OT Information Security Manager in R&D where the cloud meets the instruments. IQX and our corporate IT run on the same Microsoft security platform, Entra ID, Defender and Sentinel, and you will help us apply one set of security standards across both. Over time, the role will also support R&D Software with secure development.
Key responsibilities include:
- Own the cloud security posture of IQX: Microsoft Defender for Cloud findings, secure score and Azure recommendations, turned into prioritized work that gets done
- Identify, assess and follow up security risks for the platform and its services, as part of Information Security's risk management
- Work with Entra ID, Defender and Sentinel across IQX and corporate IT, so that identity, detection and monitoring follow the same standards
- Manage static and software composition analysis, such as SonarQube, together with R&D, including quality gates and how exceptions are handled, so that scanning becomes part of how teams work rather than an obstacle to it
- Provide security input into architecture and design, together with the IQX Enterprise Architect
- Strengthen secure development and operations practice: make the current state visible, agree targets with the teams and follow up
- Triage vulnerabilities in the platform, from scanning, penetration tests or outside reports, and drive what matters to closure through Information Security's vulnerability handling and reporting process
- Answer IQX-related customer security questions and assess the third-party components and vendors the platform depends on
- Help shape how AI is used securely in our development and products, together with the OT Information Security Manager
What we hope to see you bring
This role belongs to Information Security but lives inside IQX Operations and works with development every day. It only works if both engineers and security people take you seriously. If you are strong on most of the list below and curious about the rest, apply and tell us which is which.
- A solid grounding in application and cloud security, such as OWASP, secure SDLC and DevSecOps, and experience making it work inside real development teams
- Hands-on experience securing Azure and the Microsoft security stack, ideally Defender for Cloud, Entra ID and Microsoft Sentinel
- Experience with SAST and SCA tooling such as SonarQube, including quality gate design and the judgment to grant an exception without hollowing out the gate
- Experience with security risk assessment: identifying, rating and following up risks in a way the business can act on
- A technical background combined with the ability to plan, prioritize and look beyond the next ticket
- Enough working knowledge of the Cyber Resilience Act, NIS2 and GDPR to turn them into engineering requirements rather than policy text
- Credibility with developers, the ability to influence without authority, and the pragmatism to tell a control that improves securi ty from one that only produces evidence
- Professional-level English. Danish is an advantage, not a requirement
Why choose FOSS?
You will secure the platform that connects instruments testing most of the world's milk and traded grain, and the data our customers base quality and payment decisions on. You join the Information Security team, work day to day alongside IQX Operations and our development teams and have real influence on how the platform and its security evolve. We support relevant certification and training. The position is full-time at the FOSS Innovation Center in Hillerød, with onsite presence and occasional travel.
We would love to hear from you!
Submit your application through the link below. Please note that only applications sent through the link will be considered. We review applications on an ongoing basis and encourage you to apply early. If you have any questions about the role, please contact Christian Ryge, Head of Information Security, at +45 2091 6692.
FOSS is committed to maintaining an inclusive and diverse culture. You can help us sustain an unbiased recruitment process by not including photo and age in your application.
