Domain Expert – Secure Coding - 10826782
ITProposal
Get more replies from employers
Send a job-specific resume in minutes.
Benefits offered by this job
Job summary
ITProposal in Amstelveen, Netherlands, is seeking an experienced Domain Expert – Secure Coding (SECO) to strengthen the Secure Coding team within a large-scale banking environment. The role sits at the intersection of application security and software development and focuses on secure coding practices, vulnerability management, and DevSecOps.
The ideal candidate has 6–8 years of experience in secure coding, with a strong background in SAST/SCA tooling and security guidance for engineering teams.
Qualifications
- 6–8 years of experience in software development, application security, or secure coding.
- Proven experience with secure software development practices.
- Strong understanding of application security principles.
- Experience analyzing and resolving software vulnerabilities.
- Experience working with developers to improve application security.
- Experience in large enterprise environments.
- Ability to communicate complex security concepts clearly to technical teams.
Responsibilities
- Maintain and improve the organization's software security posture.
- Define, maintain, and improve secure coding standards and guidelines.
- Support development teams in implementing secure software development practices.
- Provide guidance on application security best practices.
- Help teams understand security risks and implement remediation strategies.
- Analyze and triage security findings from tools like Fortify, Nexus Lifecycle, and other scanners.
- Review, prioritize, and categorize vulnerabilities based on risk and business impact.
- Improve vulnerability remediation processes.
- Collaborate with development teams to fix vulnerabilities within applications.
- Contribute to security tooling improvements and automation initiatives.
Skills
Education
Tools
Job description
We are seeking an experienced Domain Expert – Secure Coding (SECO) to join the Development Services department within a large-scale regulated banking environment.
The Secure Coding (SECO) team acts as the knowledge center for software security, helping development teams improve the security, quality, and resilience of their applications. The successful candidate will work at the intersection of application security and software development, supporting engineering teams in identifying, understanding, and resolving security vulnerabilities.
This role focuses on improving secure coding practices, analyzing security findings, enhancing security tooling, and enabling developers to build secure software by design.
The ideal candidate will have strong experience in secure coding, application security, SAST/SCA tooling, software development, vulnerability management, and DevSecOps practices.
- Maintain and improve the organization's software security posture.
- Define, maintain, and improve secure coding standards and guidelines.
- Support development teams in implementing secure software development practices.
- Provide guidance on application security best practices.
- Help teams understand security risks and implement effective remediation strategies.
- Analyze and triage security findings from tools such as:
- Fortify (SAST)
- Nexus Lifecycle (SCA)
- Similar security scanning tools
- Review, prioritize, and categorize vulnerabilities based on risk and business impact.
- Help developers understand security findings and provide remediation guidance.
- Support development teams in fixing vulnerabilities within applications.
- Improve vulnerability remediation processes.
- Improve and optimize security tooling capabilities.
- Fine-tune security rulesets to:
- Reduce false positives
- Improve detection accuracy
- Increase security quality
- Contribute to internally developed security tools, including Repository Scanner (RESC).
- Support automation initiatives around application security processes.
- Collaborate closely with development teams across the organization.
- Integrate security practices into software development workflows.
- Support secure CI/CD practices.
- Promote security-by-design principles.
- Share knowledge and educate engineering teams on secure development practices.
- Research and contribute to new security challenges, including:
- AI-driven security threats
- Agentic AI development risks
- Emerging application security vulnerabilities
- Help define approaches for managing new technology risks.
- Support innovation within secure software development practices.
- Work closely with:
- Software developers
- DevOps teams
- Security specialists
- Platform engineering teams
- Architecture teams
- Provide security guidance and technical support.
- Conduct knowledge-sharing sessions.
- Help create a security-aware development culture.
You will join a multicultural Agile team responsible for improving software security across the organization.
The Development Services department provides expertise and standards for software development practices across the enterprise.
The team operates in a collaborative environment where:
- Developers are the primary stakeholders.
- Secure development practices are continuously improved.
- Innovation and automation are encouraged.
- Hybrid working is the standard.
Work Location: Amstelveen, Netherlands
Work Model: Hybrid
- 6–8 years of experience in software development, application security, or secure coding.
- Proven experience working with secure software development practices.
- Strong understanding of application security principles.
- Experience analyzing and resolving software vulnerabilities.
- Experience working with developers to improve application security.
- Experience working in large enterprise environments.
- Ability to communicate complex security concepts clearly to technical teams.
- Secure coding practices
- Application Security (AppSec)
- Vulnerability analysis
- Security remediation
- Secure Software Development Lifecycle (SSDLC)
- DevSecOps practices
Experience with:
- Static Application Security Testing (SAST)
- Software Composition Analysis (SCA)
- Fortify
- Nexus Lifecycle
- Similar security scanning platforms
- Strong software development experience in at least one programming language:
- Python
- Java
- C#
- JavaScript/TypeScript
- Similar languages
Experience or understanding of:
- Microsoft Azure
- Kubernetes
- GitHub Enterprise
- CI/CD pipelines
- Development tooling platforms
- Experience with:
- Repository security scanning
- Security automation
- Security policy enforcement
- Cloud security practices
- AI security risks
- GitHub security features
- Knowledge of container security.
- Experience with Kubernetes security.
- Experience in regulated industries such as banking or financial services.
- Security certifications:
- CISSP
- CSSLP
- Security+
- CEH
- Equivalent certifications
- Strong application security mindset
- Analytical and problem-solving skills
- Ability to investigate complex security issues
- Strong communication and stakeholder management
- Ability to collaborate with software engineers
- Pragmatic approach to security
- Knowledge-sharing mindset
- Agile way of working
- English: Mandatory
- Dutch language skills are advantageous but not required.
Bachelor's degree or equivalent experience in:
- Computer Science
- Software Engineering
- Cyber Security
- Information TechnologyApplication Security
Relevant security certifications are beneficial.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
