Application Security Tester

A2Z-CM N.V.; Amstelveen; Hybrid; EUR 70,000 - 100,000; Full time

Job summary

A2Z-CM N.V. offers a security consultant role focused on in-depth code reviews and security assessments across development teams. You will validate vulnerabilities, produce threat models, and provide architecture recommendations to reduce enterprise risk.

Utilize SAST, DAST, and SCA tools, translate technical risks into business language, and guide remediation with stakeholders. Hybrid work in Amstelveen may require on-site presence based on assignments.

Qualifications

• Understanding cybersecurity principles, cloud security, and application security.
• Ability to perform complex security assessments and translate findings into actionable recommendations.
• Conduct secure code reviews to identify vulnerabilities and mitigations.
• Assist in validating and prioritizing security findings for remediation.
• Collaborate with development teams to resolve vulnerabilities using SAST/DAST/SCA tools.
• Promote secure coding standards and best practices.

Responsibilities

• Perform in-depth code reviews to validate vulnerabilities and promote secure coding.
• Deliver security assessments, threat models, and architecture recommendations.
• Ensure a minimum number of security assessments per quarter and reduce enterprise risks.

Skills

Cybersecurity fundamentals

Security architecture

Risk translating to business language

Stakeholder management

Secure coding practices

Tools

SAST

DAST

SCA

Job description

Perform in-depth code reviews to validate security vulnerabilities and ensure secure coding practices across development teams. Ideal candidate has hands-on experience with application security tools, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA).

Deliver Security Assessments , threat models, and architecture recommendations during application reviews and projects. Complete a minimum number of security assessments per quarter and directly contribute to reducing enterprise risks

Requirements

• Strong understanding of cybersecurity principles, cloud security, and Application Security architecture.
• Ability to perform complex security assessments and translate findings into clear, actionable recommendations.
• Conduct secure code reviews to identify vulnerabilities and recommend mitigations.
• Assist in validating and prioritizing security findings for remediation.
• Collaborate with development teams to ensure timely and effective vulnerability resolution Utilize and manage security testing tools (SAST, DAST, SCA).
• Support the adoption of secure coding standards and best practices

Hybrid work environment; on‑site presence in Amstelveen may be requested depending on assignments.

The consultant must follow company security, compliance, and guidelines.

1) High degree of ownership, independence, and accountability.

2) Ability to simplify complex technical risks into business language.

3)Strong stakeholder management and advisory skills.