Application security engineer in banking

We are looking for a Secure Coding / Application Security Developer to join the Secure Coding (SECO) team within the Development Services department of a leading banking organisation in Amsterdam. The Development Services department acts as a centre of expertise for software development, focusing on continuously improving software quality, development processes and security standards. As a Domain Expert within the SECO team, you will work closely with development teams across the organisation to strengthen application security, identify and resolve vulnerabilities, improve security tooling and promote secure coding practices.

• Maintain and continuously improve the organisation's application security posture.
• Develop, maintain and promote Secure Coding Standards and guidelines.
• Triage, analyse and prioritise security findings from SAST and SCA tools.
• Work with security tools such as Fortify, Nexus Lifecycle or equivalent solutions.
• Help developers understand security vulnerabilities and recommend appropriate remediation approaches.
• Support development teams in identifying and fixing vulnerabilities in their code.
• Improve and fine-tune security scanning rulesets to reduce false positives and improve detection quality.
• Contribute to internally developed security tools, including the Repository Scanner (RESC).
• Collaborate with development teams to integrate security into software development processes.
• Explore emerging security risks, including AI-driven attacks and agentic development.
• Share security knowledge and promote secure coding awareness across development teams.

• 4–6 years of experience in software development, secure coding or application security.
• Strong understanding of Secure Coding practices and Application Security.
• Proficiency in at least one programming language.
• Hands-on experience with SAST (Static Application Security Testing) and SCA (Software Composition Analysis) tools.
• Fortify
• Nexus Lifecycle
• Similar SAST/SCA security scanning solutions.
• Ability to analyse, assess and prioritise security vulnerabilities and findings.
• Experience supporting developers in resolving application security issues.
• Understanding of software development processes and secure development practices.
• Good communication skills and the ability to explain technical security issues to development teams.
• Experience working in large corporate environments with organisational sensitivity.
• Fluent in English.

• Условий в вакансии нет