Fullstack Software Engineer Security

Fort Knox-level security for 13 million customers

How do you make our customers happy?

To set the scene, bol serves over 13 million customers, logs 129 million monthly visits, and offers roughly 35 million products. These are big numbers, and it takes a lot of tech to keep our platform running. We must ensure that all of this tech meets the highest security standards, because at our scale, even minor slip-ups can have major consequences. That’s where you come in: ensuring every customer trusts us with their data as much as they trust us with their orders. When you prevent a vulnerability, you’re not just working on code—you’re protecting millions of people and thousands of partner businesses. Team up and help ‘Fort Knox’ our tools, build actionable dashboards, and educate 750+ developers to think security-first. Your code is their shield.

The biggest challenge

IT security and compliance are must-haves. No matter how well an application runs, and no matter how user-friendly and scalable it is, it must be secure. At the same time, security shouldn’t feel like a roadblock to innovation. The real challenge? Making security so intuitive, so integrated, and so intelligently designed that developers embrace it rather than endure it. Can you transform security from a checklist item into a mindset? Can you help our tech community not just ‘get security right,’ but actually enjoy the process? Welcome aboard!

What you'll do as a Full Stack Software Engineer Security

In this role, you’ll start in team Karma, part of the IT Security Department, and from there join one of our (many!) product teams where you’ll empower fellow developers to build secure applications as effortlessly as possible. Team Karma facilitates IT security and compliance insights for all of our applications and teams. In total, a developer community of 750+ tech-driven souls.

You won’t just be building tools at bol—you’ll be building a movement. As a security champion, you’ll coach teams to include security by design. Your dashboards don’t just inform; they inspire better security practices. Through code reviews, workshops, and daily collaboration, you’ll grow the security mindset across our entire engineering organization.

At bol, we are big on autonomy: it’s what makes us strong. So this role comes with a hefty dose of ownership. We welcome your innovative ideas. How can we create more comprehensive security insights across our landscape? Did we overlook any potential risks? How can we better inform colleagues of the best course of action?

The role also comes with a mandate to develop features end-to-end with your team. And you get all the credit for a job well done. After all, you called the shots and made the tough technical decisions. The flip side? You also take ownership when things don’t turn out as planned. ‘You build it – you run it – you love it’ is our mantra, and we live it every day. Your key responsibilities:

• Develop clean, highly performant and secure code
• Create ‘addictive’ dashboards that provide actionable insights
• Mentor developers on secure coding through reviews, workshops, and collaboration
• Use security incidents as learning catalysts for the entire organization
• Champion a security-first culture and ensure solutions add customer and partner value
• Take full, end-to-end ownership of team efforts and their impact
• Experiment with cutting-edge technology and promising new security concepts

3 reasons why this is (not) for you

Pros

• Security evangelist Spring, Java/Kotlin, Google Cloud, and security frameworks are your playground, and you want to make others as passionate about security as you are.
• Culture creator You're a coding pioneer who builds bridges between security and development, not walls. Quality over quantity is your principle, and you inspire others to adopt it.
• Impact multiplier You see every security tool as an opportunity to educate and elevate 750+ developers. Your dashboards don't just spot or even prevent problems —they teach teams to think differently.

Cons

• Lone cowboy What developers, business colleagues, customers, and partners think about your code? That’s their business.
• Handheld device Autonomy and ownership are scary concepts. You'd rather be led by the hand than guide others toward security excellence.
• Checklist aficionado Security is just another word for compliance. Inspiring others? Teaching? Driving a security-first culture? Sounds like extra work you didn't sign up for.

Where you'll work

In this role, you’ll join a product team you can always rely on for constructive feedback and growth opportunities—and that expects you to provide the same. The setting? Think ‘campus,’ including a game room and soccer field. Despite our size, we laugh at rigid rules and traditional work structures. Yes, we’re a market leader, but free of any corporate odor you might associate with that. Team Karma specifically? We’re security enablers who believe the best security is included by design. We celebrate when teams ship secure code without even thinking about it—because our tools made it natural. We take our mission seriously, but ourselves lightly. Ready to help us prove that security and developer happiness aren’t mutually exclusive? Show us how you’ll Fort Knox our platform while keeping our innovation going at full speed!