Application Security Specialist (AI)

Gazelle Global; Amsterdam; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

Gazelle Global in Amsterdam, Netherlands is seeking an Application Security Specialist (AI) to strengthen security across applications and AI-enabled platforms. You will design and implement security controls, perform assessments, and guide security architecture for AI agents and software supply chains.

The role requires 6+ years in application security with hands-on work in SAST/DAST, API security, and threat modelling, plus experience securing GenAI and AI-enabled development.

Qualifications

• 6+ years in Application Security, Security Engineering or DevSecOps.
• Hands-on experience with SAST, DAST, API Security, SCA, container security, threat modelling and vulnerability management.
• Experience securing AI-enabled applications and AI agents, RAG architectures, or GenAI solutions.
• Strong stakeholder management, communication and advisory skills.
• Knowledge of secure software development and CI/CD security.

Responsibilities

• Deliver security maturity improvements by implementing controls and secure-by-design practices.
• Improve vulnerability management through AI-assisted analysis and risk-based prioritisation.
• Establish AI security controls, guardrails, and assessment processes for AI apps and platforms.
• Implement software and AI supply chain security controls, SBOM/AI-BOM requirements, third-party governance.
• Conduct security assessments, threat modelling, and architecture reviews across API, cloud, and AI initiatives.
• Enable developers and promote secure development practices with security champions.
• Demonstrate measurable reduction of risks through implemented controls and remediation guidance.

Skills

Application Security

AI Security

Security Architecture

Stakeholder management

Security Advisory

Education

CISSP

SecAI+

Tools

SAST

DAST

API Security

SCA

Container Security

Threat Modelling

Vulnerability Management

CI/CD Security

Cloud-native platforms

AI-enabled applications

Job description

As a preferred supplier to one of our biggest Financial Client, I am seeking for a Application Security Specialist (AI) for a position in Amsterdam, Netherlands. We are seeking an Application Security Specialist with AI and Agent Security expertise to strengthen Application Security capabilities and enable the secure adoption of AI technologies across the organisation. The contractor will design and implement security controls, perform security assessments, provide security architecture guidance, and establish governance across software development, AI platforms, AI agents, and software supply chains.

Responsibilities:

• Deliver agreed Application Security maturity improvements by implementing security controls, standards, and secure-by-design practices within committed timelines.
• Improve vulnerability management effectiveness through AI-assisted analysis, risk-based prioritisation, and timely remediation support.
• Establish and operationalise AI Security controls, guardrails, and assessment processes for AI applications, AI agents, and AI-enabled development platforms within agreed milestones.
• Implement Software and AI Supply Chain Security controls, including SBOM/AI-BOM requirements, dependency risk management, and third-party AI governance.
• Deliver security assessments, threat modelling, and architecture reviews for application, cloud, and AI initiatives within agreed service levels.
• Increase adoption of secure development practices through developer enablement, Security Champion engagement, and security awareness activities.
• Demonstrate measurable reduction of application, AI, and software supply chain risks through implementation of security controls and remediation guidance.

Who we are looking for:

• Specialist role focused on Application Security, AI Security, and Security Architecture advisory.
• Ideal candidate combines a strong Application Security background with practical experience in securing AI-enabled systems, AI agents, and modern software development platforms.
• Proven ability to influence engineering teams and drive security improvements in complex technology environments is essential.
• Experience working with Engineering, Architecture, Cloud, DevSecOps, and Product teams is highly desirable.
• Strong communication, consulting, and stakeholder management capabilities are critical for success in this role.
• We operate in a hybrid model and employees are expected to be in office 3 days a week.
• The role will work with stakeholders globally (EU, APAC, US).

Relevant knowledge, skills & competences:

Required

• 6+ years of experience in Application Security, Security Engineering, or DevSecOps.
• Hands-on experience with SAST, DAST, API Security, SCA, Container Security, Threat Modelling, and Vulnerability Management.
• Experience with secure software development, CI/CD security, and cloud-native platforms.
• Experience securing AI-enabled applications, GenAI solutions, AI Agents, RAG architectures, or similar technologies.
• Strong stakeholder management, communication, and advisory skills.

Preferred

• Experience in financial services or other regulated industries.
• Knowledge of NIST AI RMF, OWASP, OWASP SAMM, and NIST SSDF.
• Relevant certifications such as CISSP, SecAI+, or equivalent.