Application Security Specialist

A2Z-CM N.V.; Amsterdam; On-site; EUR 124,000 - 193,000; Full time

Job summary

A2Z-CM N.V. seeks an Application Security Specialist to strengthen security across applications, AI platforms, and software supply chains. The contractor will design controls, perform assessments, and provide governance for secure development, AI agents, and related technologies.

You will lead security architecture advisory, enable developers, and collaborate with global stakeholders to reduce risks in complex tech environments.

Qualifications

• 5+ years in Application Security, Security Engineering, or DevSecOps.
• Hands-on with SAST, DAST, API Security, SCA, Container Security, Threat Modelling, and Vulnerability Management.
• Experience with secure software development, CI/CD security, and cloud-native platforms.
• Strong stakeholder management, communication, and advisory skills.

Responsibilities

• Deliver Application Security maturity improvements by implementing security controls and secure-by-design practices.
• Improve vulnerability management with AI-assisted analysis and risk-based prioritization.
• Establish AI security controls, guardrails, and assessment processes for AI apps and platforms.
• Implement Software and AI Supply Chain Security controls, including SBOM/AI-BOM requirements.
• Provide security assessments, threat modelling, and architecture reviews across apps, clouds, and AI initiatives.
• Promote secure development through developer enablement, security champions, and awareness activities.
• Demonstrate measurable risk reductions through security controls and remediation guidance.

Skills

5+ years in Application Security

SAST

DAST

API Security

SCA

Container Security

Threat Modelling

Vulnerability Management

CI/CD security

Cloud-native platforms

Education

Bachelor's or Master's in Computer Science, Cyber Security, or related field

CISSP or equivalent certification

Job description

Seeking an Application Security Specialist to strengthen Application Security capabilities and enable the secure adoption of AI technologies across the organization. The contractor will design and implement security controls, perform security assessments, provide security architecture guidance, and establish governance across software development, AI platforms, AI agents, and software supply chains.

With the following results (SMART)

• Deliver agreed Application Security maturity improvements by implementing security controls, standards, and secure-by-design practices within committed timelines.
• Improve vulnerability management effectiveness through AI-assisted analysis, risk-based prioritization, and timely remediation support.
• Establish and operationalize AI Security controls, guardrails, and assessment processes for AI applications, AI agents, and AI-enabled development platforms within agreed milestones.
• Implement Software and AI Supply Chain Security controls, including SBOM/AI-BOM requirements, dependency risk management, and third-party AI governance.
• Deliver security assessments, threat modelling, and architecture reviews for application, cloud, and AI initiatives within agreed service levels.
• Increase adoption of secure development practices through developer enablement, Security Champion engagement, and security awareness activities.
• Demonstrate measurable reduction of application, AI, and software supply chain risks through implementation of security controls and remediation guidance.

Requirements

Required

• 5+ years of experience in Application Security, Security Engineering, or DevSecOps.
• Hands-on experience with SAST, DAST, API Security, SCA, Container Security, Threat Modelling, and Vulnerability Management.
• Experience with secure software development, CI/CD security, and cloud-native platforms.
• Strong stakeholder management, communication, and advisory skills.

Preferred

• Experience securing AI-enabled applications, GenAI solutions, AI Agents, RAG architectures, or similar technologies.
• Experience in financial services or other regulated industries.
• Knowledge of NIST AI RMF, OWASP, OWASP SAMM, and NIST SSDF.
• Bachelor's or Master's degree in Computer Science, Cyber Security, or a related field.
• Relevant certifications such as CISSP or equivalent.

Additional information

• Specialist role focused on Application Security, AI Security, and Security Architecture advisory.
• Ideal candidate combines a strong Application Security background with practical experience in securing AI-enabled systems, AI agents, and modern software development platforms.
• Proven ability to influence engineering teams and drive security improvements in complex technology environments is essential.
• Experience working with Engineering, Architecture, Cloud, DevSecOps, and Product teams is highly desirable.
• Strong communication, consulting, and stakeholder management capabilities are critical for success in this role.
• The role will work with stakeholders globally (EU, APAC, US).