Product Security Lead

At Lely, we believe in achieving a sustainable, profitable and agreeable future for dairy farmers by combining robotisation, engineering and farming expertise.

It all started with a dream cherished by two brothers in Maassluis 75 years ago, and ever since, we have worked to become innovative market leaders in automated systems for dairy farmers across the globe. With a team of 2,400 professional specialists, we work constantly to bring about revolutionary solutions for the agro industry. We are based at our Maassluis Campus, a building which features the highest sustainability performance possible, not just in the Netherlands, but on a global scale. Our overall objective: making dairy farming interesting, also for the coming generations.

In Lely’s Product Development department about 500 engineers are developing smart solutions that that help automate dairy farms. We develop a wide range of products such as milking and feeding robots, automated guided vehicles, and farm management software.

With software development, both on the embedded as application side, comes cyber security. We are constantly working on the cybersecurity robustness of our software by supporting our teams and engineers with peer-programming, threat modelling, tooling, coaching, and training.

Job profile

We are looking for an experienced Product Security Lead, to set further direction in building our Product Security team. Besides creating and owning the vision, strategy, and roadmap for our product security, the role holds the responsibility for maturing Lely’s Product Security Framework. The ideal candidate is a subject matter expert, hands-on, and with the ability to lead a small but growing team of Senior Security Specialists. Ensures, together with the team, continued growth of the product (development) security maturity.

Beside the above mentioned, other responsibilities are:

• Enabling the Product Development MT to steer and prioritize security topics.
• Collaboration with Lely's Cyber Security Center on topics such as vulnerability management, security reporting, monitoring, and incident response.
• Supporting Lely's Risk & Compliance team to translate compliance requirements into controls and tasks that are practical and applicable for development teams.
• Taking charge of facilitating and fostering Lely's Security Community.
• Building a Product Security knowledge management and awareness program.
• Enhancing the integration of security into the Software Development process (SSDLC).
• Owning the Product Development security training portfolio, ensuring each role within the organisation has clear knowledge- and training requirements.
• Ensuring the Product Security team has a great service delivery with a quick response time.

About you

As a proven experienced Product Security Lead, you have deep knowledge of security protocols and tooling throughout the software development lifecycle as well as profound and recent experience in secure software development practices. You are up to date with the latest developments in the field and able to translate the implications into Lely’s context. You are an effective communicator delivering key messages to team stakeholders, and business partners using informative clear verbal and written communications.

As a leader, you lead instead of managing, coach the team as a whole and each of its members individually on performance and personal development. You are result oriented and able to instill a culture of knowledge sharing and continuous improvement.

• Master’s degree in computer science, Computer Engineering, relevant technical field, or equivalent practical experience.
• 3+ years of experience in implementing and leading product security controls and processes like secure SDLC, security champions, threat modelling, risk assessment and bug bounty.
• Hands on skill in building developer centric security solutions.
• Expertise in areas like shift-left, secure development, vulnerability- and risk management.
• Experience in integrating security into organizational change plans and processes.
• Experience with growing the Security Maturity of multiple software development teams.
• Familiar with OWASP top 10 and CWE top 25 standards.
• Excellent level of English (verbal and written). Additionally good level of Dutch is preferred.

• An amazing job at an international company that is at the forefront of the agricultural sector to make the dairy farmer’s life easier, more sustainable, and more enjoyable. This is your chance to share and once again enrich your specialized knowledge.
• Working in an international environment at one of the most innovative organizations in the Netherlands at the hypermodern Lely Campus in Maassluis.
• A salary range between € 5200,- and € 7400,- gross per month, in relation to your knowledge and experience.
• Excellent working conditions, including 27 vacation days & 13 scheduled days off.
• An open working environment including flexible working hours and opportunities to work remotely.
• Freedom in organizing your own work.
• Excellent environment for personal development & growth.
• The space and freedom to innovate, construct new ideas and tinker in our well-equipped workshop (also for private projects).
• #FitatLely program with our own Lely Gym where you can exercise for free, (online) sports lessons, masterclasses about working from home and other activities in the field of Body, Mind or Food.

...And our own barista who makes the best cappuccinos from fresh milk, straight from the farmer.

Recruitment or Consulting agency?

We appreciate your interest, but we are sourcing all our candidates directly. We understand you are trying to offer your candidates interesting jobs at an innovative company like Lely but consider that any unsolicited profiles you send us will be treated as direct applications.