Application Security Engineer - API and AI Security

ABN AMRO Bank N.V.; Amstelveen; On-site; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Flexible benefits

Pension scheme

Remote work possible

Vacation: 5 weeks + 2 days

Development budget

Job summary

ABN AMRO Bank N.V. in Amstelveen is seeking an Application Security Engineer focused on WAF and API security. You will be a defender of the bank’s application layer, collaborating with development teams to embed security into products from the start.

You will tune WAFs and security platforms, translate vulnerability findings into actionable guidance, and stay alert to evolving API and AI security frontiers. English is the main language in this international team.

Qualifications

• Proactive problem-solver in an Agile/Scrum team.
• Hands-on API security tooling and WAF experience.
• Clear remediation guidance for developers.
• Understanding enterprise network and cloud architecture.

Responsibilities

• Tune WAF, API, and AI security platforms.
• Analyze telemetry and translate findings into actionable guidance.
• Collaborate with development and platform teams to embed security.

Skills

API security

WAF tuning

Network security

Cloud security

Python/Powershell

Agile/Scrum

Developer empathy

Threat telemetry

API architecture

MITRE ATT&CK

Tools

Salt

Noname/Akamai

Sequence

Job description

At a glance

We are looking for a highly motivated Application Security Engineer with a strong understanding of network security. Do you want to work in a Network Security team and focus on strengthening the bank’s WAF and API security capabilities? Do you like to analyse findings from our API security platform, translate them into clear security risks and practical remediation guidance, and work closely with development teams to help them resolve vulnerabilities effectively? Interested in joining a dynamic and fast‑changing environment that allows you to develop yourself broadly and become one of the knowledgeable pillars we can rely on in our organisation? Do you want to be part of an international team that safeguards the security posture of ABN AMRO? Do you have a hands‑on mentality and want to make an impact? Then we’re looking for you!

Your job

As an Application Security Engineer specializing in WAF and API Security, you are a crucial defender of ABN AMRO’s application layer. Operating within the CISO Cyber Defence department, your primary goal is to ensure that application‑facing network security controls are seamlessly integrated across the bank’s entire IT ecosystem.

Rather than functioning as a passive reviewer, you actively collaborate with development and platform teams. You analyse real‑time telemetry from our API security platforms, translate complex vulnerability findings into practical, developer‑friendly remediation guidance, and review API architectures—including emerging frontiers like AI and Model Context Protocol (MCP) platform security. You'll spend your time tuning Web Application Firewalls (WAF), API and AI secuiraty platforms, assisting with firewall change approvals, and consulting directly with feature teams to ensure security is built into products from the start.

Working environment

You'll join the CISO department, which connects client, bank, and societal interests through information security. With about 500 global staff, CISO ensures the bank's security and pursues innovative solutions in a fast‑changing, international environment. The office is in Amstelveen near Amsterdam, and English is the main language. Within CISO, the Cyber Defence department has around 150 employees across 7 sub‑departments.

We offer you the opportunity to contribute to the future of the cyber security of ABN AMRO. While using your known skills, you will learn to use the newest tools and gain knowledge from your co‑workers. Besides learning new hard skills, we will also focus on your personal (soft) skills that you would like to improve. We offer training opportunities, lots of growing opportunities and fun times with colleagues.

Your profile

You are a security engineer who understands both sides of the coin: the intricate mechanics of network defense and the fast‑paced reality of modern software development.You excel at taking complex threat telemetry and turning it into clear, empathetic guidance that developers can actually act on.

What makes you a great fit:

• Proactive problem‑solver: You thrive in an Agile/Scrum team, briging continuous improvement midnest and a passion for data‑driven decision making
• AppSec & API Security Expertise: You bring hands‑on experience with dedicated API security tooling (such as Salt, Noname/Akamai, or Sequence) alongside modern WAF solutions. You know how to inspect API traffic, evaluate specs, and secure application endpoints.
• Developer Empathy & Advisory Skills: You don't just throw vulnerability reports over the fence. You communicate clearly with development teams, providing practical, developer‑friendly remediation steps that keep velocity high while protecting the bank.
• Solid Network & Cloud Foundation: You understand enterprise network security architecture, hybrid cloud environments (Microsoft Azure, VMware), and industry frameworks like NIST, CIS Controls, and MITRE ATT&CK.
• Curious Cyber Defender Mindset: You stay ahead of emerging tech trends—from AI integrations to new API protocols—and bring a continuous learning attitude, scripting capabilities (Python/PowerShell), and a knack for analytical problem‑solving.

We are offering

We believe it is important to be a good employer. Joining us means stepping into a role with impact, supported by excellent employment conditions that foster your job satisfaction, development, and wellbeing.

In addition, we offer:

• An attractive gross monthly salary based on a 36‑hour work week, including holiday allowanceand a flexible benefit budget.
• An excellent pension scheme, ensuring that you are well prepared for the future.
• Flexibility in working: working from home is possible in consultation with your team and depending on your role. We will provide an ergonomic home office setup for you.
• Plenty of room for relaxation with five weeks of vacation per year, supplemented by two mandatory days off. You can also purchase up to four additional weeks of vacation annually.
• Five “Banking for better days”: extra days off that you can use for personal development or volunteer work.
• Personal development is key: you receive a development budget of €1,000 per year, which can accumulate up to €3,000.
• An annual public transport pass with free public transportation throughout the Netherlands for both business and private use.

You can find more information about our employment conditions and salary scales in our Collective Labour Agreement (CLA), which applies to this vacancy.

Your Future: Inclusive, Innovative, Sustainable

At ABN AMRO, we believe in "Banking for better, for generations to come." Equal opportunities for everyone are a crucial foundation, as we strive for an inclusive culture where all employees feel seen, heard, and valued. Our vision ofbeing a personal bank in the digital agealigns perfectly with the demand for surprising insights and innovative solutions, born from a diverse interplay of cultures and experiences. We focus on customer experience, sustainability, and building a future‑proof bank, conducting annual reviews to ensure equal pay for equal work. Join a bank that embraces ingenuity and ambition, and make an impact with us for a better future.

If you want to apply for the B-Able or Reboot program, make sure to mention it both in the title and the content of your resume.

Disclaimer external recruitment agencies

External recruitment agencies need to have a signed agreement with ABN AMRO BANK N.V., executed by a Talent Acquisition Specialist, when submitting a resume to a vacancy. No unsolicited services or offers, please.

Use of AI in our application process

You’re welcome to use AI to help write your CV or cover letter, as long as it reflects your own story. We review every application personally and without AI. During interviews, real time AI tools may not be used. With your permission, interviews can be recorded and supported by AI. This helps us keep the process fair, careful, and transparent.