Application Security Engineer

About the role

As an , you will play a pivotal role in ensuring the security of our applications and systems. Your expertise will help us identify vulnerabilities and implement effective security measures to protect our users and data. Collaborating closely with development teams, you will be responsible for integrating security practices into the software development lifecycle. This position offers an exciting opportunity to work in a dynamic environment where innovation and security go hand in hand.

Key facts

What you'll do

• Conduct thorough security assessments of applications to identify vulnerabilities and recommend appropriate remediation strategies.
• Collaborate with software development teams to integrate security best practices into the development process, ensuring secure coding standards are met.
• Develop and maintain security tools and frameworks to automate security testing and enhance our security posture.
• Monitor and analyze security incidents, responding to potential threats and providing timely resolutions.
• Create detailed documentation of security policies, procedures, and guidelines for the organization.
• Lead security training sessions for development teams to promote awareness and understanding of application security principles.
• Participate in threat modeling exercises to identify potential security risks in new projects and initiatives.
• Stay up-to-date with the latest security trends, vulnerabilities, and regulatory requirements to ensure compliance.
• Collaborate with cross-functional teams to ensure security is a priority across all projects and initiatives.
• Assist in the development of incident response plans and participate in security incident drills to prepare for potential security breaches.

Requirements

• A minimum of 3 years of experience in application security or a related field, with a proven track record of identifying and mitigating security risks.
• Strong knowledge of secure coding practices and familiarity with common security vulnerabilities such as OWASP Top Ten.
• Experience with security testing tools such as static analysis, dynamic analysis, and penetration testing tools.
• Proficiency in programming languages such as Python, Java, or JavaScript, along with a solid understanding of web application architectures.
• Familiarity with security frameworks and standards such as NIST, ISO 27001, or PCI DSS.
• Excellent problem-solving skills and the ability to work effectively in a fast-paced environment.
• Strong communication skills, with the ability to convey complex security concepts to non-technical stakeholders.
• A proactive approach to security, with a passion for staying ahead of emerging threats and vulnerabilities.

Nice to have

• Relevant security certifications such as CISSP, CEH, or OSCP.
• Experience with cloud security practices and tools, particularly in AWS or Azure environments.
• Knowledge of DevSecOps practices and tools to enhance security in CI/CD pipelines.
• Familiarity with regulatory compliance requirements related to data privacy and security, such as GDPR.

Skills & tools

• Proficient in using security tools such as Burp Suite, OWASP ZAP, or similar applications for vulnerability assessment.
• Familiar with version control systems like Git to collaborate on code and security practices.
• Experience with scripting languages for automation of security tasks and processes.
• Knowledge of container security practices and tools, particularly in Docker and Kubernetes environments.
• Proficient in using monitoring tools to detect and respond to security incidents in real-time.
• Ability to analyze logs and security events to identify potential threats and vulnerabilities.

Practical notes

• This position is based in Amsterdam, and candidates must be eligible to work in the Netherlands.
• The role offers a competitive salary, commensurate with experience, along with benefits such as health insurance and professional development opportunities.
• FareHarbor promotes a collaborative work culture, encouraging team members to share ideas and contribute to innovative solutions.
• Applicants should be prepared for a multi-stage interview process, including technical assessments and discussions with team members to evaluate fit and expertise.

At FareHarbor, we prioritize security and strive to create a safe environment for our customers. As an Application Security Engineer, you will be instrumental in shaping our security practices and ensuring that our applications remain resilient against threats. Join us in our mission to provide exceptional service while maintaining the highest security standards. If you are passionate about application security and are eager to make a difference, we invite you to apply and become a part of our dedicated team.