Overview
As an Application Security Engineer at FareHarbor, you will strengthen the security of our products across the SDLC and lead secure development practices. You’ll collaborate with product, platform, and security teams to review designs, model threats, and remediate vulnerabilities in apps, APIs, and CI/CD pipelines. You’ll also support security monitoring, incident response, and automation to keep our growing platform secure for thousands of clients worldwide. This role offers impact by shaping secure software delivery in a fast-paced, cross-functional environment in Amsterdam.
Arbeidsvoorwaarden / Benefits
- Global leave benefit
- 22 weeks paid parental leave
- 2 weeks paid grandparent leave
- Life insurance policy
- Pension Plan
- Hybrid friendly
Verantwoordelijkheden
- Conduct application security reviews, code reviews, threat modeling, and design reviews for new and existing features
- Identify and remediate vulnerabilities in applications, APIs, services, and GitLab CI/CD pipelines via SAST/DAST/SCA, container scanning, and related controls
- Support remediation activities from pentests, bug bounties, and vulnerability findings with technical input and evidence
- Guide secure coding practices, authentication/authorization, API security, secrets management, and secure deployment patterns
- Contribute to security monitoring, including IAM, AWS WAF, SIEM rules, alerting logic, and logging improvements
- Participate in security alert triage, investigation, incident response, and on-call rotation
- Collaborate with engineering teams to ensure security is integrated into the SDLC
Belangrijkste vereisten
- Senior engineer with strong application security and secure SDLC experience
- Proven ability to perform security reviews and remediation of findings from pentests and audits
- Experience implementing security controls in GitLab CI/CD (SAST/DAST/SCA/secret scanning, IaC/dep scanning)
- Proficiency in Python or another high-level language (Go, Java)
- Good understanding of AWS security concepts (IAM, WAF, Kubernetes, containers, IaC)
- Experience with security monitoring, SIEM use cases, logging, and WAF tuning
- Familiarity with security and compliance frameworks (NIST, PCI DSS, GDPR, SOC 2, SOX)
- Incident response, security investigations, and management experience
- Experience with API security, microservices, and distributed architectures
- Experience with AI-assisted security automation tools (e.g., Cursor, Tines, Elastic)
- Nice to have: security certifications, bug bounty experience, Terraform/IaC, internal security tooling
- Location: Netherlands, hybrid in Amsterdam
- Strong communication to explain risks to technical and non-technical stakeholders
- Proactive, ownership-driven mindset
- Effective cross-functional collaboration with product, engineering, platform, and security teams
- Application security and secure SDLC
- Web/API security and OWASP Top 10 mitigation
- Code review, threat modeling, design reviews
Application Security Engineer in Amsterdam werkgever: Jobrapido
StarPark is een uitstekende werkgever die je de kans biedt om te werken op diverse evenementen en festivals, waar je in een informele en prettige werksfeer kunt bijdragen aan de veiligheid van bezoekers. Met flexibele werkmogelijkheden en goede begeleiding vanuit het team, stimuleert StarPark persoonlijke groei en ontwikkeling, waardoor je niet alleen waardevolle ervaring opdoet, maar ook de mogelijkheid hebt om door te groeien binnen de organisatie. Wij verwelkomen iedereen, ongeacht achtergrond, en geloven dat jouw talent het belangrijkste is.
