We are seeking an experienced Domain Expert – Secure Coding (SECO) to join the Development Services department within a large-scale regulated banking environment.
The Secure Coding (SECO) team acts as the knowledge center for software security, helping development teams improve the security, quality, and resilience of their applications. The successful candidate will work at the intersection of application security and software development, supporting engineering teams in identifying, understanding, and resolving security vulnerabilities.
This role focuses on improving secure coding practices, analyzing security findings, enhancing security tooling, and enabling developers to build secure software by design.
The ideal candidate will have strong experience in secure coding, application security, SAST/SCA tooling, software development, vulnerability management, and DevSecOps practices.
Key Responsibilities Secure Coding & Application Security- Maintain and improve the organization's software security posture.
- Define, maintain, and improve secure coding standards and guidelines.
- Support development teams in implementing secure software development practices.
- Provide guidance on application security best practices.
- Help teams understand security risks and implement effective remediation strategies.
- Analyze and triage security findings from tools such as:
- Fortify (SAST)
- Nexus Lifecycle (SCA)
- Similar security scanning tools
- Review, prioritize, and categorize vulnerabilities based on risk and business impact.
- Help developers understand security findings and provide remediation guidance.
- Support development teams in fixing vulnerabilities within applications.
- Improve vulnerability remediation processes.
- Improve and optimize security tooling capabilities.
- Fine-tune security rulesets to:
- Reduce false positives
- Improve detection accuracy
- Increase security quality
- Contribute to internally developed security tools, including Repository Scanner (RESC).
- Support automation initiatives around application security processes.
- Collaborate closely with development teams across the organization.
- Integrate security practices into software development workflows.
- Support secure CI/CD practices.
- Promote security-by-design principles.
- Share knowledge and educate engineering teams on secure development practices.
- Research and contribute to new security challenges, including:
- AI-driven security threats
- Agentic AI development risks
- Emerging application security vulnerabilities
- Help define approaches for managing new technology risks.
- Support innovation within secure software development practices.
- Work closely with:
- Software developers
- DevOps teams
- Security specialists
- Platform engineering teams
- Architecture teams
- Provide security guidance and technical support.
- Conduct knowledge-sharing sessions.
- Help create a security-aware development culture.
You will join a multicultural Agile team responsible for improving software security across the organization.
The Development Services department provides expertise and standards for software development practices across the enterprise.
The team operates in a collaborative environment where:
- Developers are the primary stakeholders.
- Secure development practices are continuously improved.
- Innovation and automation are encouraged.
- Hybrid working is the standard.
Work Location: Amstelveen, Netherlands
Work Model: Hybrid
- 6–8 years of experience in software development, application security, or secure coding.
- Proven experience working with secure software development practices.
- Strong understanding of application security principles.
- Experience analyzing and resolving software vulnerabilities.
- Experience working with developers to improve application security.
- Experience working in large enterprise environments.
- Ability to communicate complex security concepts clearly to technical teams.
- Secure coding practices
- Application Security (AppSec)
- Vulnerability analysis
- Security remediation
- Secure Software Development Lifecycle (SSDLC)
- DevSecOps practices
Experience with:
- Static Application Security Testing (SAST)
- Software Composition Analysis (SCA)
- Fortify
- Nexus Lifecycle
- Similar security scanning platforms
- Strong software development experience in at least one programming language:
- Python
- Java
- C#
- JavaScript/TypeScript
- Similar languages
Experience or understanding of:
- Microsoft Azure
- Kubernetes
- GitHub Enterprise
- CI/CD pipelines
- Development tooling platforms
- Experience with:
- Repository security scanning
- Security automation
- Security policy enforcement
- Cloud security practices
- AI security risks
- GitHub security features
- Knowledge of container security.
- Experience with Kubernetes security.
- Experience in regulated industries such as banking or financial services.
- Security certifications:
- CISSP
- CSSLP
- Security+
- CEH
- Equivalent certifications
- Strong application security mindset
- Analytical and problem-solving skills
- Ability to investigate complex security issues
- Strong communication and stakeholder management
- Ability to collaborate with software engineers
- Pragmatic approach to security
- Knowledge-sharing mindset
- Agile way of working
- English: Mandatory
- Dutch language skills are advantageous but not required.
Bachelor's degree or equivalent experience in:
- Computer Science
- Software Engineering
- Cyber Security
- Information TechnologyApplication Security
Relevant security certifications are beneficial.
#J-18808-Ljbffr€90000 - €130000 monthly