ASML (Veldhoven, Netherlands)
ASML is an innovation leader in the semiconductor industry. We provide chipmakers with everything they need – hardware, software and services – to mass produce patterns on silicon through lithography.
We are looking for a skilled and detail-oriented Core Security Engineer to strengthen our security posture and ensure compliance across all levels of our Java-based applications and infrastructure. The ideal candidate will focus on security architecture, risk analysis, and vulnerability management while working closely with our development and DevSecOps teams to implement security controls and ensure robust compliance.
Role and ResponsibilitiesConduct thorough security assessments, including risk analysis, threat modeling, and vulnerability assessments.
Collaborate with DevSecOps teams to integrate security tools into CI/CD pipelines and ensure effective security testing (SAST, DAST, SCA).
Implement and manage secret management and access control policies across all environments.
Ensure security best practices in cloud, container, and on-premise environments (e.g., GCP, Docker, Kubernetes).
Monitor security incidents and support the incident response process.
Lead initiatives to implement and uphold industry compliance standards (e.g., SOC 2, EU CRA, ISO, NIST).
Develop and maintain security policies, standards, and guidelines.
Conduct training and knowledge-sharing sessions to promote security awareness. Educate and guide product, development, and operations teams on security best practices, fostering a strong security culture.
A Bachelor or Master in a technical field
3+ years of experience in security engineering or related roles.
Strong background in Java security, secure coding practices, and risk assessment.
Proficient in security assessment tools (e.g., SonarQube, Checkmarx, OWASP ZAP, Trivy) and hands-on experience with SAST, DAST, and SCA.
Familiarity with infrastructure as code tools (e.g., Terraform, Ansible) and CI/CD pipelines.
Expertise in cloud and container security (AWS, Docker, Kubernetes).
In-depth knowledge of industry standards and frameworks (CIS, MITRE, ISO, NIST) and compliance standards (SOC 2, EU CRA).
Excellent analytical, problem-solving, and communication skills.
Nice to have
Experience with SIEM tools (e.g., Splunk, ELK) for monitoring and threat detection.
Knowledge of incident response and risk management frameworks.
Excellent collaboration and communication skills with technical and non-technical people
You have a passion for security.
You’re able to motivate your team, foster collaboration, and give directions
You’re enthusiastic about solving complex problems and translating them into modern, elegant and simple solution
You like to discuss technical challenges and you’re motivated to push the boundaries of technology
Please add your complete, recent CV and cover letter for this position to your application. We can't process your application without the above-mentioned documents. Need to know more about applying for a job at ASML? Read our frequently asked questions.
This position requires access to controlled technology, as defined in the United States Export Administration Regulations (15 C.F.R. § 730, et seq.). Qualified candidates must be legally authorized to access such controlled technology prior to beginning work. Business demands may require ASML to proceed with candidates who are immediately eligible to access controlled technology.
Diversity and inclusionASML is an Equal Opportunity Employer that values and respects the importance of a diverse and inclusive workforce. It is the policy of the company to recruit, hire, train and promote persons in all job titles without regard to race, color, religion, sex, age, national origin, veteran status, disability, sexual orientation, or gender identity. We recognize that Diversity and inclusion is a driving force in the success of our company.
Need to know more about applying for a job at ASML? Read our frequently asked questions.
Work Experience: 4-9 years
Travel: No
Education Level: Bachelor,Master
Employment Type: FULL_TIME
Team: Design Engineering and Architecture
Technical Field: Software
Mechatronisch Engineer (32 tot 40 uur per week) Zoek jij diversiteit en creativiteit in engineering voor machinebouw? En is een contactrijke rol jouw ding? Dan komen wij graag met je in contact! Wat...
Altijd al deel willen uitmaken van een team waar collegialiteit even belangrijk is als je technische kennis? We zoeken een nieuwe collega voor ons team bij de High Tech Campus Eindhoven! Ben jij de...
Introduction to the jobAs an Integration engineer you are a member of the test and integration team in Software Infrastructure and Computer Systems (SICS) and integrates the deliverables from SICS...
Introduction to the jobWe are looking for a skilled and detail-oriented Core Security Engineer to strengthen our security posture and ensure compliance across all levels of our Java-based...
Introduction to the jobThe Greenhouse project implements a state-of-the art software development environment. This software development environment services a large community with over 4000 active...
IntroductionThe Business Partner role is part of the Business Engineering department within the Operational Excellence organization within the EUV Factory. The Business partner collaborates and...
Introduction to the jobAre you an electrical or mechatronics engineer with affinity for modelling, testing and experimenting? Are your looking for a job where you can combine your analytical skills...
Introduction to the jobContinuous innovation on electronics designs is vital for ASML ambitions as technology leader.‘Excellent designs are characterized by the right balance between function,...
Introduction to the jobThe Business engineer role is a vacancy in the Business analytics, Automation & Support (BAAS) team, which is part of the Supplier Operations department.Supplier Operations...
Introduction to the job We are seeking a hands-on DevSecOps Engineer to elevate security within our software development lifecycle by embedding robust, automated security practices across our CI/CD...