Hybrid Application Security Tester & Threat Modeling Pro

A2Z-CM N.V.; Amstelveen; Hybrid; EUR 70,000 - 100,000; Full time

Job summary

A2Z-CM N.V. offers a security consultant role focused on in-depth code reviews and security assessments across development teams. You will validate vulnerabilities, produce threat models, and provide architecture recommendations to reduce enterprise risk.

Utilize SAST, DAST, and SCA tools, translate technical risks into business language, and guide remediation with stakeholders. Hybrid work in Amstelveen may require on-site presence based on assignments.

Qualifications

• Understanding cybersecurity principles, cloud security, and application security.
• Ability to perform complex security assessments and translate findings into actionable recommendations.
• Conduct secure code reviews to identify vulnerabilities and mitigations.
• Assist in validating and prioritizing security findings for remediation.
• Collaborate with development teams to resolve vulnerabilities using SAST/DAST/SCA tools.
• Promote secure coding standards and best practices.

Responsibilities

• Perform in-depth code reviews to validate vulnerabilities and promote secure coding.
• Deliver security assessments, threat models, and architecture recommendations.
• Ensure a minimum number of security assessments per quarter and reduce enterprise risks.

Skills

Cybersecurity fundamentals

Security architecture

Risk translating to business language

Stakeholder management

Secure coding practices

Tools

SAST

DAST

SCA

Job description

A2Z-CM N.V. offers a security consultant role focused on in-depth code reviews and security assessments across development teams. You will validate vulnerabilities, produce threat models, and provide architecture recommendations to reduce enterprise risk.

Utilize SAST, DAST, and SCA tools, translate technical risks into business language, and guide remediation with stakeholders. Hybrid work in Amstelveen may require on-site presence based on assignments.