IAM Security Engineer

At Bynder, we don’t just store creative assets; we enable brands to deliver exceptional content experiences that drive business impact.
In an era of exploding content volume and complexity, the world’s most iconic brands, including Spotify, Campari, and Lacoste , trust Bynder as their single source of truth for creative content . Our industry-leading DAM platform serves as the strategic engine for brand governance and control.
We are leading the shift from management to AI-powered content orchestration . By integrating human-led, customizable AI Agents directly into our enterprise-grade infrastructure, we enable brands to augment their workforce and intelligently automate high-effort workflows without sacrificing brand integrity. We turn creative content into intelligent assets that accelerate personalization and drive measurable business outcomes.
Ready to grow your career by helping the world’s leading brands deliver exceptional content experiences? Join our global team of 600+ ‘Byndies’ and help 4,000+ organizations work smarter with their content. We’re looking for a Security Engineer who thrives in a growth-oriented environment, someone who sees security as a starting point, not the finish line. If you’re hands‑on by nature, energized by breadth, and serious about building security that actually scales in a cloud‑native SaaS environment, you’ll feel right at home here.
You’ll report directly to the VP Information Security and work alongside an Associate Security Engineer who brings strong application security and tooling chops. Together, you’ll cover the full security stack: AppSec, cloud, detection, and governance across a modern, cloud‑native SaaS platform used by thousands of brands worldwide.
It’s how we scale securely, and it’s part of how we win together.
Plan and (help) execute penetration tests against web applications, APIs, and cloud infrastructure, and manage external pentest engagements including scoping, vendor coordination, and remediation tracking.
Own and evolve our cloud security posture across our AWS environment, working with Wiz (CSPM, CNS, Code, AI Security) to drive risk prioritization, misconfiguration remediation, and shift‑left security workflows.
Champion security controls within our CI/CD pipelines, from IaC scanning and SAST integration to secure deployment practices, working closely with DevOps and development teams.
Translate compliance requirements (SOC2, ISO 42001, GDPR) into concrete technical controls and act as a technical point of contact for customer security discussions, questionnaires, and enterprise onboarding.
3–7 years of hands‑on experience in application security, cloud security (AWS), or a broad security engineering role.

• Proven experience conducting penetration tests on web applications, APIs, and/or cloud environments, with a solid grip on OWASP Top 10 and common vulnerability classes.
• Solid understanding of AWS security: IAM, VPC design, cloud‑native architecture and a clear intuition for what secure cloud infrastructure looks like.
• Familiarity with application security testing tools (SAST, DAST) and a practical understanding of DevSecOps: you know where to plug in and how to make it stick with developers.
• Write security scripts, tinker with tools, or keep a personal GitHub with automation or research projects.

Have experience with Terraform or IaC security scanning.
Have hands‑on experience with Kubernetes and container security.
Python, Java, Scala) and can read and reason about code to support security reviews.
What’s in it for you?
Real breadth and ownership across a modern, cloud‑native security stack across a high‑growth SaaS platform.
Flexibility to work from home, with weekly office time in Rotterdam and Amsterdam.