FULL-TIME ROLE — Senior Application Security Engineer (SDLC)
Employment Type: Full-Time
Location: Amsterdam (Hybrid)
About the Company
Our client is a fast-moving fintech innovator operating at global scale. Their platforms power real-time, high-volume trading and financial operations across multiple markets—demanding relentless performance, precision, and security.
You’ll be joining a small, elite engineering group where security is treated as a first-class product, not a checkbox. This is an environment where your technical depth will be respected, your ideas will shape architecture, and your work will directly protect mission-critical systems.
The Opportunity
This is not a typical AppSec role. You’ll step into a position where security is woven deeply into the engineering culture. You’ll collaborate directly with senior engineers, technical leads, and product decision-makers to embed secure practices across the full SDLC.
If you come from a strong software engineering or backend development background and have since carved your path into application security , this role gives you the chance to lead and influence security strategy for an entire fintech ecosystem.
What You’ll Do
- Dive deep into code to uncover logic flaws, race conditions, and subtle vulnerabilities.
- Partner with product owners and engineers to architect secure solutions from the ground up.
- Lead the implementation and tuning of SAST, DAST, and SCA tooling.
- Manage and evolve the company's bug bounty program; triage and validate external vulnerability reports.
- Ensure alignment with major compliance frameworks (e.g., SOC 2, ISO 27001).
- Coordinate high-impact security audits including black-box, red team, and purple team engagements.
- Evaluate and conduct due diligence on third-party systems and integrations.
What You Bring
- Bachelor's degree in Computer Science, Information Security, or equivalent experience.
- 8+ years in Security Engineering or Application Security.
- A deep technical foundation in software development (e.g., backend, distributed systems, performance-critical applications).
- Strong knowledge of cloud security, web application security, and Linux systems.
- AppSec-related certifications are a plus (e.g., OSWE, OSCP, GWAPT, GIAC certs).
Why This Role Is Exceptional
- You’ll be part of a high-caliber team where security engineering is taken seriously.
- You’ll influence company-wide security posture and technical direction.
- You’ll work on complex, high-impact challenges in a cutting-edge fintech environment.
Benefits
- Competitive compensation + performance bonuses
- Health, dental & vision coverage
- Pension/retirement plan with employer match
- Continuous professional development budget
- A collaborative, engineering-driven culture
Solliciteren