Application Security Engineer — Secure Coding & Tools

Stafide; Amsterdam; On-site; EUR 65,000 - 90,000; Full time

Job summary

Stafide in Amsterdam is seeking a Secure Coding / Application Security Engineer to strengthen our software security program. You will implement secure coding practices, analyze vulnerabilities from SAST/SCA tools, and collaborate with development teams to fix issues.

You will work with Fortify, Nexus Lifecycle, and similar platforms; mentor engineers, fine-tune rules, and help advance secure SDLC across Azure, Agile, and DevOps environments.

Qualifications

• 4–6 years of overall IT experience in software development, secure coding, or application security.
• Hands-on experience in Secure Coding and Application Security.
• Proficiency in at least one programming language.
• Experience with SAST and SCA security tools such as Fortify, Nexus Lifecycle, or similar tools.
• Knowledge of vulnerability analysis, assessment, and prioritisation.
• Understanding of secure software development practices and security standards.
• Exposure to Microsoft Azure, Agile methodologies, and DevOps practices.

Responsibilities

• Maintain and improve application security by implementing secure coding practices and standards.
• Analyse and investigate security vulnerabilities identified through SAST and SCA tools.
• Work with security tools such as Fortify, Nexus Lifecycle, or similar platforms.
• Help development teams understand security findings and implement appropriate fixes.
• Support developers in identifying, resolving, and preventing code vulnerabilities.
• Maintain and improve secure coding standards, guidelines, and best practices.
• Fine-tune security tool rulesets to reduce false positives and improve detection quality.
• Contribute to internal security tools, including repository scanning solutions.
• Explore emerging security risks, including AI-driven threats and agentic development.
• Collaborate with development teams to continuously improve software security.

Skills

Secure coding

Application security

SAST/SCA tooling

English communication

Education

IT experience 4–6 years

Tools

Fortify

Nexus Lifecycle

Azure

Job description

Stafide in Amsterdam is seeking a Secure Coding / Application Security Engineer to strengthen our software security program. You will implement secure coding practices, analyze vulnerabilities from SAST/SCA tools, and collaborate with development teams to fix issues.

You will work with Fortify, Nexus Lifecycle, and similar platforms; mentor engineers, fine-tune rules, and help advance secure SDLC across Azure, Agile, and DevOps environments.