Application Security Consultant

Sentior, Ltd.; Nederland; Hybride; EUR 110 000 - 152 000; Plein temps

Résumé du poste

Sentior, Ltd. is seeking a Senior Application Security Consultant for a 3-month engagement in Amstelveen, Netherlands. You will perform hands-on security assessments, penetration tests and secure code reviews, integrating security into the SDLC and CI/CD pipelines.

The role requires strong collaboration with development, DevOps and architecture teams to improve secure coding practices and threat modelling. The ideal candidate has deep experience in application security, familiarity with Azure

Qualifications

• Senior-level experience in application security (Band 7/8).
• Hands-on security testing with Burp Suite, OWASP ZAP, Snyk, SonarQube, Checkmarx, Fortify, Semgrep or GitHub Advanced Security.
• Knowledge of OWASP, MITRE ATT&CK and NIST SP 800-115.

Responsabilités

• Perform application security assessments, penetration tests and secure code reviews.
• Identify, validate and prioritize application vulnerabilities.
• Execute and analyse SAST, DAST and SCA scans.

Connaissances

Senior app security

Burp Suite

OWASP ZAP

Snyk

SonarQube

Checkmarx

Fortify

Semgrep

GitHub Advanced Security

Formation

CISSP

CISM

OSWA

OSWE

OSCP

Outils

Azure

VMware

Description du poste

# Application Security ConsultantKyndryl Amstelveen 3 maandenGepubliceerd 1 uur geleden · Opportunity ID: 1064201Tarief indicatie —Uren 40 u/wStart 30 Nov 2026Duur 3 maandenInteresse in deze opdracht?## De opdrachtWe are looking for an experienced Senior Application Security Consultant to assess and improve the security of applications.You will perform hands-on security assessments, penetration tests and secure code reviews, identifying vulnerabilities and advising development teams on effective remediation.You will work closely with development, DevOps and architecture teams to integrate security into the software development lifecycle (DevSecOps).Key Responsibilities- Perform application security assessments, penetration tests and secure code reviews.- Identify, validate and prioritize application vulnerabilities.- Execute and analyse SAST, DAST and SCA scans.- Provide actionable remediation recommendations and secure coding advice.- Integrate security testing tools into CI/CD pipelines.- Advise development teams on application security and DevSecOps practices.- Contribute to threat modelling and security architecture reviews.Required Experience & Skills- Senior-level experience (Band 7/8) in Application Security or Offensive Security.- Hands-on experience with security testing tools such as Burp Suite, OWASP ZAP, Snyk, SonarQube, Checkmarx, Fortify, Semgrep or GitHub Advanced Security.- Knowledge of security frameworks and methodologies, including OWASP, MITRE ATT&CK and NIST SP 800-115.- Experience with threat modelling techniques such as STRIDE, PASTA or Attack Trees.- Experience with CI/CD pipelines and DevSecOps.- Knowledge of Azure and on-premise VMware environments.- Understanding of software development and application architecture.- Ability to translate technical findings into clear, actionable recommendations.Certifications (Preferred)CISSP, CISM, OSWA, OSWE or OSCP.Personal Competencies- Independent, proactive and accountable.- Strong analytical and problem-solving skills.- Excellent communication and stakeholder management skills.- Able to translate complex technical risks into business impact.Additional Information- Hybrid working environment.- On-site presence in Amstelveen may be required depending on the assignment.- Compliance with company security policies and guidelines is mandatory.The preferred start date is as soon as possible, subject to successful DISA/PES + Bank screening and completion of the onboarding process. Please note that the start date is indicative and cannot be guaranteed, as it depends on the duration and outcome of these processes.