Application Security Engineer

Role: Secure Coding / Application Security Developer Location: Amsterdam, Netherlands Job Description We are looking for a Secure Coding / Application Security Developer to join the Secure Coding (SECO) team within the Development Services department of a leading banking organisation in Amsterdam. The Development Services department acts as a centre of expertise for software development, focusing on continuously improving software quality, development processes and security standards. As a Domain Expert within the SECO team, you will work closely with development teams across the organisation to strengthen application security, identify and resolve vulnerabilities, improve security tooling and promote secure coding practices. You will contribute to maintaining security standards, analysing security findings and exploring emerging security challenges, including AI-driven threats and agentic development. Key Responsibilities - Maintain and continuously improve the organisation's application security posture. - Develop, maintain and promote Secure Coding Standards and guidelines. - Triage, analyse and prioritise security findings from SAST and SCA tools. - Work with security tools such as Fortify, Nexus Lifecycle or equivalent solutions. - Help developers understand security vulnerabilities and recommend appropriate remediation approaches. - Support development teams in identifying and fixing vulnerabilities in their code. - Improve and fine-tune security scanning rulesets to reduce false positives and improve detection quality. - Contribute to internally developed security tools, including the Repository Scanner (RESC). - Collaborate with development teams to integrate security into software development processes. - Explore emerging security risks, including AI-driven attacks and agentic development. - Share security knowledge and promote secure coding awareness across development teams. Required Skills & Experience - 4–6 years of experience in software development, secure coding or application security. - Strong understanding of Secure Coding practices and Application Security. - Proficiency in at least one programming language. - Hands-on experience with SAST (Static Application Security Testing) and SCA (Software Composition Analysis) tools. - Experience with tools such as: - Fortify - Nexus Lifecycle - Similar SAST/SCA security scanning solutions. - Ability to analyse, assess and prioritise security vulnerabilities and findings. - Experience supporting developers in resolving application security issues. - Understanding of software development processes and secure development practices. - Good communication skills and the ability to explain technical security issues to development teams. - Experience working in large corporate environments with organisational sensitivity. - Fluent in English. Competencies - Application Security & Secure Coding - SAST & SCA Security Testing - Software Development - Microsoft Azure - DevOps - CI/CD Pipelines - Agile Way of Working - Vulnerability Analysis & Remediation - Security Standards & Guidelines - Developer Collaboration