Application Security & AI Security Specialist

Gazelle Global; Amsterdam; Hybrid; EUR 90,000 - 135,000; Full time

Job summary

Gazelle Global is seeking an Application Security & AI Security Specialist in Amsterdam. You will join a large-scale tech environment to secure AI-enabled development platforms and modern cloud-native apps.

You will design controls, conduct assessments, and guide engineering teams on secure coding, vulnerability remediation, and security best practices in a hybrid setup with strong collaboration across international stakeholders.

Qualifications

• Minimum 5 years of professional experience in Application Security, Security Engineering, or DevSecOps.
• Strong hands-on experience with SAST, DAST, SCA, and API Security.
• Experience with Container Security, Threat Modelling, and Vulnerability Management.
• Strong understanding of secure software development principles and DevSecOps practices.
• Experience integrating security testing and controls into CI/CD pipelines.
• Knowledge of cloud-native platforms and modern application architectures.
• Proven ability to assess security risks and provide practical remediation recommendations.
• Strong communication, stakeholder management, and technical advisory skills.
• Comfortable working with multidisciplinary technical teams in an international environment.

Responsibilities

• Design, implement, and continuously improve Application Security controls, standards, and secure-by-design practices.
• Conduct application security assessments, threat modelling, and security architecture reviews.
• Identify and manage vulnerabilities using SAST, DAST, SCA, and API security testing methodologies.
• Strengthen vulnerability management processes through risk-based prioritisation, AI-assisted analysis, and remediation guidance.
• Develop and implement AI Security controls and guardrails for Generative AI applications, AI Agents, RAG architectures, and AI-enabled development platforms.
• Improve Software Supply Chain Security, including SBOM, AI-BOM, dependency security, and third-party risk management.
• Integrate security controls and automated security testing into CI/CD pipelines.
• Assess security risks across cloud-native applications, containers, APIs, and modern software architectures.
• Support engineering teams with secure coding practices and practical security recommendations.
• Promote security awareness and collaborate with Security Champions to improve security maturity.
• Work with international stakeholders to ensure security practices align with organisational standards and industry best practices.

Skills

SAST

DAST

SCA

API Security

Container Security

Threat Modelling

Vulnerability Management

CI/CD Integration

Cloud-native

Secure Software Development

Security Architecture

Security Advisory

Communication

Education

Bachelor's or Master's degree in Computer Science, Cybersecurity, or related field

Job description

Application Security & AI Security Specialist

About the Opportunity

Location: Amsterdam, Netherlands
Contract Duration: 12 Months (Extension Possible)
Start Date: 30 November 2026
Working Hours: 36 hours per week
Working Arrangement: Hybrid - 3 days onsite per week
Contract Type: Payroll / Detachering (ZZP not possible)
Language: English

We are currently looking for an experienced Application Security & AI Security Specialist to join a large-scale, international technology environment based in Amsterdam.

This is an opportunity to play a key role in strengthening Application Security capabilities while supporting the secure adoption of emerging AI technologies, including Generative AI, AI Agents, and AI-enabled development platforms.

You will work closely with Engineering, Architecture, Cloud, DevSecOps, and Product teams to design and implement security controls, assess vulnerabilities, improve secure development practices, and provide security architecture guidance.

The ideal candidate will bring a strong technical background in Application Security alongside an interest in, or practical experience with, securing AI-driven applications and modern cloud-native environments.

Key Responsibilities

• Design, implement, and continuously improve Application Security controls, standards, and secure-by-design practices.

• Conduct application security assessments, threat modelling, and security architecture reviews.

• Identify and manage vulnerabilities using SAST, DAST, SCA, and API security testing methodologies.

• Strengthen vulnerability management processes through risk-based prioritisation, AI-assisted analysis, and remediation guidance.

• Develop and implement AI Security controls and guardrails for Generative AI applications, AI Agents, RAG architectures, and AI-enabled development platforms.

• Improve Software Supply Chain Security, including SBOM, AI-BOM, dependency security, and third-party risk management.

• Integrate security controls and automated security testing into CI/CD pipelines.

• Assess security risks across cloud-native applications, containers, APIs, and modern software architectures.

• Support engineering teams with secure coding practices and practical security recommendations.

• Promote security awareness and collaborate with Security Champions to improve security maturity.

• Work with international stakeholders to ensure security practices align with organisational standards and industry best practices.

Essential Requirements

• Minimum 5 years of professional experience in Application Security, Security Engineering, or DevSecOps.

• Strong hands-on experience with SAST, DAST, Software Composition Analysis (SCA), and API Security.

• Experience with Container Security, Threat Modelling, and Vulnerability Management.

• Strong understanding of secure software development principles and DevSecOps practices.

• Experience integrating security testing and controls into CI/CD pipelines.

• Knowledge of cloud-native platforms and modern application architectures.

• Proven ability to assess security risks and provide practical remediation recommendations.

• Strong communication, stakeholder management, and technical advisory skills.

• Comfortable working with multidisciplinary technical teams in an international environment.

Nice to Have

• Experience securing Generative AI applications, Large Language Models (LLMs), AI Agents, or Retrieval-Augmented Generation (RAG) systems.

• Knowledge of AI Security risks, guardrails, and governance frameworks.

• Experience with Software Supply Chain Security, SBOM, or AI-BOM.

• Knowledge of NIST AI RMF, OWASP, OWASP SAMM, and NIST SSDF.

• Previous experience within banking, financial services, or other regulated industries.

• Relevant security certifications, such as CISSP or equivalent.

• Bachelor's or Master's degree in Computer Science, Cybersecurity, or a related field.

What We're Looking For

We're looking for someone who combines strong hands-on Application Security expertise with a proactive, security-focused mindset.

You should be confident working with development teams, identifying security risks, advising on technical solutions, and contributing to organisation-wide security improvements.

Experience with emerging AI technologies would be particularly valuable, as securing AI-enabled applications and development platforms will be an important part of this assignment.