Product Security Lead

Company Description

At Lely, we believe in achieving a sustainable, profitable and agreeable future for dairy farmers by combining robotisation, engineering and farming expertise.

It all started with a dream cherished by two brothers in Maassluis 75 years ago, and ever since, we have worked to become innovative market leaders in automated systems for dairy farmers across the globe. With a team of 2,400 professional specialists, we work constantly to bring about revolutionary solutions for the agro industry. We are based at our Maassluis Campus, a building which features the highest sustainability performance possible, not just in the Netherlands, but on a global scale. Our overall objective: making dairy farming interesting, also for the coming generations.

Job Description

In Lely’s Product Development department about 500 engineers are developing smart solutions that that help automate dairy farms. We develop a wide range of products such as milking and feeding robots, automated guided vehicles, and farm management software.

With software development, both on the embedded as application side, comes cyber security. We are constantly working on the cybersecurity robustness of our software by supporting our teams and engineers with peer-programming, threat modelling, tooling, coaching, and training.

Job profile

We are looking for an experienced Product Security Lead, to set further direction in building our Product Security team. Besides creating and owning the vision, strategy, and roadmap for our product security, the role holds the responsibility for maturing Lely’s Product Security Framework. The ideal candidate is a subject matter expert, hands-on, and with the ability to lead a small but growing team of Senior Security Specialists. Ensures, together with the team, continued growth of the product (development) security maturity.

Beside the above mentioned, other responsibilities are:

• Enabling the Product Development MT to steer and prioritize security topics.
• Collaboration with Lely's Cyber Security Center on topics such as vulnerability management, security reporting, monitoring, and incident response.
• Supporting Lely's Risk & Compliance team to translate compliance requirements into controls and tasks that are practical and applicable for development teams.
• Taking charge of facilitating and fostering Lely's Security Community.
• Building a Product Security knowledge management and awareness program.
• Enhancing the integration of security into the Software Development process (SSDLC).
• Owning the Product Development security training portfolio, ensuring each role within the organisation has clear knowledge- and training requirements.
• Ensuring the Product Security team has a great service delivery with a quick response time.

About you

As a proven experienced Product Security Lead, you have deep knowledge of security protocols and tooling throughout the software development lifecycle as well as profound and recent experience in secure software development practices. You are up to date with the latest developments in the field and able to translate the implications into Lely’s context. You are an effective communicator delivering key messages to team stakeholders, and business partners using informative clear verbal and written communications.

As a leader, you lead instead of managing, coach the team as a whole and each of its members individually on performance and personal development. You are result oriented and able to instill a culture of knowledge sharing and continuous improvement.

Qualifications

• Master’s degree in computer science, Computer Engineering, relevant technical field, or equivalent practical experience.
• 3+ years of experience in implementing and leading product security controls and processes like secure SDLC, security champions, threat modelling, risk assessment and bug bounty.
• Hands on skill in building developer centric security solutions.
• Expertise in areas like shift-left, secure development, vulnerability- and risk management.
• Experience in integrating security into organizational change plans and processes.
• Experience with growing the Security Maturity of multiple software development teams.
• Familiar with OWASP top 10 and CWE top 25 standards.
• Excellent level of English (verbal and written). Additionally good level of Dutch is preferred.

Additional Information

To address the food demand and challenge for 2050, it is crucial to handle people, animals, and the environment responsibly. For us, this means being a reliable long-term partner for our customers and passing on the world to the next generation through sustainable product development. You can contribute to realizing this dream.

What can you expect in your role as a Product Security Lead?

• Working in an international work environment within one of the most innovative organizations in the Netherlands and also the largest robot producer in Europe. 
• Excellent employment conditions, including up to 8 weeks of vacation and a salary of up to €6200,- with room for growth within the scale. 
• Opportunities for growth where you are in charge of your own development. 
• Space and freedom to innovate, bring in new ideas, and undertake initiatives. We not only offer this, but we also genuinely expect it. It's up to you to come up with ideas and implement them. 
• A team with enthusiastic, helpful colleagues, collaborating with product development, procurement, and other stakeholders. 
• Our Lely Academy offers various training programs, such as personality training or more job-relevant training. If you want to develop yourself but it's not in the curriculum, you discuss it with your manager. 
• The #FitatLely program with our own Lely Gym. A volleyball court, basketball court, football table, and ping pong table where you can challenge your colleagues or take a break from work. 
• Lease-a-Bike scheme to lease a new bike affordably. 
• Additionally, enjoy the services and wide range of coffee and tea from our personal barista at the Lely Campus, who makes the tastiest cappuccinos from fresh milk, directly from our own farmer from the Lely Orbiter, for example. 
• A healthy work-life balance with a hybrid policy where you are 60% on Campus. This is flexible and can be arranged in consultation with your manager. Prefer more time on our modern Campus? You are always welcome (between 06:00 a.m. and 08:00 p.m.)
• Moreover, we love to celebrate. Whether it's an anniversary or our Christmas party, at Lely, we know how to celebrate! For a feel of the atmosphere, check out this video: https://www.youtube.com/watch?v=6WA3e0WHbxE

If you want to know more about working at Lely or about the vacancy, please contact me or respond via the button.

Recruitment & selection agency, consultancy, and/or staffing agency?

We appreciate the interest, but we recruit all our candidates directly. We understand that as intermediaries, you want to present candidates for our great positions and contribute to our ambitions, but this is not how we have set up our recruitment process. This means that all unsolicited profiles offered on Lely vacancies will be treated as direct applications.