Application Security & AI Security Specialist

Application Security & AI Security Specialist

Location: Amsterdam, Netherlands
Contract Duration: 12 Months (Extension Possible)
Start Date: 30 November 2026
Working Hours: 36 hours per week
Working Arrangement: Hybrid - 3 days onsite per week
Contract Type: Payroll / Detachering (ZZP not possible)
Language: English

About the Opportunity

We are currently looking for an experienced Application Security & AI Security Specialist to join a large-scale, international technology environment based in Amsterdam.

This is an opportunity to play a key role in strengthening Application Security capabilities while supporting the secure adoption of emerging AI technologies, including Generative AI, AI Agents, and AI-enabled development platforms.

You will work closely with Engineering, Architecture, Cloud, DevSecOps, and Product teams to design and implement security controls, assess vulnerabilities, improve secure development practices, and provide security architecture guidance.

The ideal candidate will bring a strong technical background in Application Security alongside an interest in, or practical experience with, securing AI-driven applications and modern cloud-native environments.

Key Responsibilities

• Design, implement, and continuously improve Application Security controls, standards, and secure-by-design practices.

• Conduct application security assessments, threat modelling, and security architecture reviews.

• Identify and manage vulnerabilities using SAST, DAST, SCA, and API security testing methodologies.

• Strengthen vulnerability management processes through risk-based prioritisation, AI-assisted analysis, and remediation guidance.

• Develop and implement AI Security controls and guardrails for Generative AI applications, AI Agents, RAG architectures, and AI-enabled development platforms.

• Improve Software Supply Chain Security, including SBOM, AI-BOM, dependency security, and third-party risk management.

• Integrate security controls and automated security testing into CI/CD pipelines.

• Assess security risks across cloud-native applications, containers, APIs, and modern software architectures.

• Support engineering teams with secure coding practices and practical security recommendations.

• Promote security awareness and collaborate with Security Champions to improve security maturity.

• Work with international stakeholders to ensure security practices align with organisational standards and industry best practices.

Essential Requirements

• Minimum 5 years of professional experience in Application Security, Security Engineering, or DevSecOps.

• Strong hands-on experience with SAST, DAST, Software Composition Analysis (SCA), and API Security.

• Experience with Container Security, Threat Modelling, and Vulnerability Management.

• Strong understanding of secure software development principles and DevSecOps practices.

• Experience integrating security testing and controls into CI/CD pipelines.

• Knowledge of cloud-native platforms and modern application architectures.

• Proven ability to assess security risks and provide practical remediation recommendations.

• Strong communication, stakeholder management, and technical advisory skills.

• Comfortable working with multidisciplinary technical teams in an international environment.

Nice to Have

• Experience securing Generative AI applications, Large Language Models (LLMs), AI Agents, or Retrieval-Augmented Generation (RAG) systems.

• Knowledge of AI Security risks, guardrails, and governance frameworks.

• Experience with Software Supply Chain Security, SBOM, or AI-BOM.

• Knowledge of NIST AI RMF, OWASP, OWASP SAMM, and NIST SSDF.

• Previous experience within banking, financial services, or other regulated industries.

• Relevant security certifications, such as CISSP or equivalent.

• Bachelor's or Master's degree in Computer Science, Cybersecurity, or a related field.

What We're Looking For

We're looking for someone who combines strong hands-on Application Security expertise with a proactive, security-focused mindset.

You should be confident working with development teams, identifying security risks, advising on technical solutions, and contributing to organisation-wide security improvements.

Experience with emerging AI technologies would be particularly valuable, as securing AI-enabled applications and development platforms will be an important part of this assignment.

Interested?

If you are an experienced Application Security or DevSecOps professional looking for your next contract opportunity in Amsterdam, we'd be happy to hear from you.

Apply directly or reach out to discuss the opportunity in more detail.