{"id":894924,"url":"https://alion.io/job/penneo-security-engineer","title":"Security Engineer","company":{"id":55340,"name":"Penneo","domain":"penneo.com","url":"https://alion.io/company/penneo","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Personio","truth_index":null},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Copenhagen, Denmark"],"countries":["DK"],"hiring_countries":["DK"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":45000,"max_usd":130000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":623},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CVE","optional":false},{"name":"Terraform","optional":false}],"status":"live","first_seen_at":"2026-09-14T08:56:17Z","employer_posted_date":"2026-09-14","last_verified_at":"2026-11-03T03:19:38Z","board_verified":true,"closed_at":null,"days_open":49,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":49},"description":"Is this you?\nImagine being the person who keeps trust running underneath every signature, every submission, every compliant transaction across Europe. That's this job. You'll work hands-on with our application stack and infrastructure, help build the security foundation for our platform, and be the person engineering teams call when something breaks.\nOne day you're deep in a Terraform config chasing down a CVE. The next you're in a room with an external auditor, making sure our controls hold up. You'll fix vulnerabilities and shape the policies around them, in the same week. If that mix - real technical depth, real regulatory weight, real ownership - sounds like exactly the kind of problem you want to solve, keep reading.\nAbout Penneo\nAt Penneo, we build technology that helps businesses operate with trust in an increasingly complex world. What started as a digital signing solution in Copenhagen has grown into secure, compliant workflows used across Europe. With new forms of tech- and AI-driven fraud emerging fast, our mission to protect the integrity of digital business is more important than ever.\nPenneo is a Certified Trusted Service Provider - we were the very first private company in Denmark to achieve this certification. That means we're not just another SaaS company. We operate critical digital trust infrastructure under the eIDAS regulation, building products that more than 3,500 companies across Europe rely on for identity, signatures, secure data handling, and compliance.\nYour role & impact\nEvery signature, every submission, every compliant transaction on our platform rests on the security work you do. As our Security Engineer, you'll scale that effort - hands-on, close to the code, close to the infrastructure. Operating as a Qualified Trust Service Provider means our software is regulated and our customers hold us to a high bar. You're part of the reason we clear it.What you'll be doing:\nOwn vulnerability management across our infrastructure: track CVEs, keep systems patched and current, and make sure nothing regulated slips through.\n\nStrengthen application security by working directly in the code and secure development practices, alongside the teams shipping it.\n\nStructure and automate our security work - from evidence collection to reporting - so it scales with us instead of slowing us down.\n\nOwn and evolve our security guidelines using Visma tooling to stay ahead of risk across our infrastructure.\n\nDrive the response when vulnerabilities or incidents happen - from triage through to fix.\n\nWork closely with our principal engineers, tech leads, and platform team, and partner tightly with Compliance & Legal on what it takes to stay a regulated, certified provider.\n\nDocument your work clearly. As a QTSP, our processes need to hold up to scrutiny - and so do yours.\n\nWhat makes you a great match?\nYou've spent 2-5 years doing this job for real, not designing it on a whiteboard. You know CVEs, application security, and denial-of-service attacks the way most people know their own street. You hold the certifications to prove it. And you're just as comfortable fixing a vulnerability at 9am as you are explaining it to a non-technical stakeholder at 3pm. You are deeply familiar with DevSecOps practices, possessing hands-on experience with SAST, DAST, and dependency management across diverse package managers.\nYou're not an architect and you're not here to hand the hard problems to someone else. You're here to do the work.\nEqually comfortable on the technical and process sides of security - from fixing a vulnerability to documenting a control.\n\nStrong stakeholder and communication skills. You'll work with engineers, leadership, and external parties alike.\n\nAble to work from our Copenhagen office around three days a week. Given the nature of the job, this isn't a fully remote role.\n\nWhat's in it for you?\nYou'll build security infrastructure that 3,500+ companies across Europe depend on - not maintain legacy controls that nobody touches. You'll have real autonomy to shape how we approach vulnerability management, and automation. You'll work with principal engineers and technical leaders who actually ship things, not committees that oversee shipping.\nBeing a QTSP isn't compliance overhead - it means every control you build, every policy you write, actually has weight. You'll know your decisions matter, concretely. Thousands of businesses create signatures, identity data, and critical transactions through our platform. You'll be part of the reason they can trust it.\nDon't wait to apply!\nNo application deadline - we hire, when we find the right match.","description_format":"text","description_chars":4629,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Denmark","iso":"DK","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Document Management","Digital Signature"],"lifecycle":[{"event":"open","at":"2026-09-14T09:24:15Z"}],"visa":[],"liveness":{"score":18,"band":"cold","label":"Long shot","p_open":1,"p_active":0.494,"p_room":0.36,"age_days":49,"expected_fill_days":30,"reasons":["conf:2","win:tail","crowd:junior"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/penneo-security-engineer","json_url":"https://alion.io/job/penneo-security-engineer.json","meta":{"generated_at":"2026-11-03T06:19:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8838,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":55340},"rest":"https://alion.io/mcp/rest/get_company?id=55340"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpenneo-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpenneo-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpenneo-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/penneo-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpenneo-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":894924}},{"tool":"search_jobs","arguments":{"company":"penneo.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":894924},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}