Application / IT Security Expert

Application Security / IT Security Specialist (Domain Expert II)

Role Overview:

We are seeking an experienced Application Security Domain Expert to join a global CISO Application Security team. In this hands-on technical role, you will bridge the gap between deep technical security and development teams. You will perform in-depth code reviews, manage application security tools, guide developers on secure coding, and help secure modern tech stacks-including emerging AI technologies.

This position is ideal for a strong technical specialist who thrives on technical execution and problem-solving, supported by clear, foundational stakeholder communication.

Role & Assignment Details:

• Contract Type: Contractor (ZZP Allowed)
• Workload: 36.0 Hours / Week
• Duration: November 23, 2026 - June 30, 2027 (Possibility of extension)
• Location: Amstelveen / Hybrid (1 fixed office day/week)
• Language: English (CV & Communication)
• Application Deadline: Friday, November 13, 2026 at 17:00

Key Responsibilities & SMART Deliverables:

• Secure Code Reviews & Testing: Conduct hands-on secure code reviews across multi-language environments to identify vulnerabilities, ensure secure coding practices, and assist developers with remediation.
• Security Assessments & Threat Modeling: Deliver comprehensive security assessments, threat models, and architectural recommendations for active applications and new projects.
• Tooling Management: Utilize and manage application security testing tools, including SAST, DAST, and SCA.
• Risk Reduction & Vulnerability Management: Validate, prioritize, and mediate security findings to measurably reduce enterprise risks quarter over quarter.
• AI Security Focus: Secure emerging AI implementations and evaluate how to safely leverage AI within enterprise security workflows.
• Stakeholder Engagement: Collaborate with global stakeholders across international locations to communicate vulnerabilities clearly and support secure development standards across teams.

Key Requirements & Experience:

Technical Skills:

• Application & Cloud Security: Deep understanding of cybersecurity principles, cloud security, and Application Security architecture.
• Tooling Expertise: Practical experience with SAST, DAST, and SCA tools.
• Code Review & Languages: Ability to perform hands-on code reviews across diverse programming languages (e.g., Python, Java, Angular, and legacy/modern frameworks).
• AI & Security: Minimum 1 year of experience working with AI technology, specifically focusing on securing AI integrations and safe AI tool utilization.

Soft Skills & Way of Working:

• Tech-First Mindset: High technical proficiency with straightforward, pragmatic communication skills.
• Independence & Ownership: High degree of autonomy, accountability, and ability to take full ownership of assignments.
• Risk Translation: Capability to simplify complex technical security risks into clear business context for global stakeholders.