Domain Expert II (Application Security / IT Security)

Gazelle Global; Amstelveen; Hybrid; EUR 83,000 - 124,000; Part time

Job summary

Gazelle Global is seeking a Domain Expert II in Amstelveen to join its global CISO Application Security team. The role is hands-on and focuses on secure coding, vulnerability assessments, threat modelling, and the management of app security testing tools across the Netherlands, Chicago, and Sydney.

You will work closely with developers to identify vulnerabilities, guide secure coding practices, and recommend remediation across modern tech stacks, including emerging AI technologies.

Qualifications

• Strong experience in application security and IT security.
• Deep understanding of cybersecurity principles and application security architecture.
• Strong knowledge of cloud security and secure application design.
• Practical experience with SAST, DAST and SCA security testing tools.
• Hands-on experience conducting secure code reviews across multiple programming languages, including Python, Java, Angular and other modern or legacy frameworks.
• Experience identifying vulnerabilities in source code and recommending remediation.
• Experience conducting application security assessments and threat modelling.
• Ability to provide security architecture recommendations for existing applications and new projects.
• Minimum 1 year of experience working with AI technology, specifically securing AI integrations and the safe use of AI tools.
• Experience validating, prioritising and managing application security vulnerabilities.
• Knowledge of vulnerability remediation, risk reduction and secure coding practices.
• Understanding of modern software development environments and application technology stacks.

Responsibilities

• Identify vulnerabilities in existing applications and guide remediation activities.
• Collaborate with development teams to embed secure coding practices.
• Perform secure code reviews across multiple languages.
• Conduct application security assessments and threat modelling.
• Communicate security risks and recommendations to global stakeholders.

Skills

Security expertise

SAST/DAST/SCA

Secure code reviews

Cloud security

Threat modelling

AI security

Job description

Domain Expert II (Application Security / IT Security)

Location: Amstelveen, Netherlands (Hybrid, 1 fixed office day per week)

Start Date: 23 November 2026

Contract Duration: Until 30 June 2027, with possibility of extension

Hours: 36 hours per week

Contract Type: Contractor – ZZP/Freelance Allowed

Language: English required (CV and communication)

Contract Type: ZZP/Freelance or Payroll (Both accepted)

Role overview

Application Security Domain Expert to join its global CISO Application Security team, connecting deep technical security expertise with development teams across the Netherlands, Chicago and Sydney.

The role focuses on hands‑on application security, including secure code reviews, vulnerability assessments, threat modelling and the management of application security testing tools.

The successful candidate will work closely with developers to identify vulnerabilities, guide secure coding practices and recommend remediation measures across modern technology stacks, including emerging AI technologies.

The position also involves managing security findings, reducing application risk and communicating technical security risks clearly to global stakeholders.

• Strong experience in application security and IT security.
• Deep understanding of cybersecurity principles and application security architecture.
• Strong knowledge of cloud security and secure application design.
• Practical experience with SAST, DAST and SCA security testing tools.
• Hands‑on experience conducting secure code reviews across multiple programming languages, including Python, Java, Angular and other modern or legacy frameworks.
• Experience identifying vulnerabilities in source code and recommending remediation.
• Experience conducting application security assessments and threat modelling.
• Ability to provide security architecture recommendations for existing applications and new projects.
• Minimum 1 year of experience working with AI technology, specifically securing AI integrations and the safe use of AI tools.
• Experience validating, prioritising and managing application security vulnerabilities.
• Knowledge of vulnerability remediation, risk reduction and secure coding practices.
• Understanding of modern software development environments and application technology stacks.