Secure Coding / Application Security Engineer (ID: 4143)

Stafide; Amsterdam; On-site; EUR 65,000 - 90,000; Full time

Job summary

Stafide in Amsterdam is seeking a Secure Coding / Application Security Engineer to strengthen our software security program. You will implement secure coding practices, analyze vulnerabilities from SAST/SCA tools, and collaborate with development teams to fix issues.

You will work with Fortify, Nexus Lifecycle, and similar platforms; mentor engineers, fine-tune rules, and help advance secure SDLC across Azure, Agile, and DevOps environments.

Qualifications

• 4–6 years of overall IT experience in software development, secure coding, or application security.
• Hands-on experience in Secure Coding and Application Security.
• Proficiency in at least one programming language.
• Experience with SAST and SCA security tools such as Fortify, Nexus Lifecycle, or similar tools.
• Knowledge of vulnerability analysis, assessment, and prioritisation.
• Understanding of secure software development practices and security standards.
• Exposure to Microsoft Azure, Agile methodologies, and DevOps practices.

Responsibilities

• Maintain and improve application security by implementing secure coding practices and standards.
• Analyse and investigate security vulnerabilities identified through SAST and SCA tools.
• Work with security tools such as Fortify, Nexus Lifecycle, or similar platforms.
• Help development teams understand security findings and implement appropriate fixes.
• Support developers in identifying, resolving, and preventing code vulnerabilities.
• Maintain and improve secure coding standards, guidelines, and best practices.
• Fine-tune security tool rulesets to reduce false positives and improve detection quality.
• Contribute to internal security tools, including repository scanning solutions.
• Explore emerging security risks, including AI-driven threats and agentic development.
• Collaborate with development teams to continuously improve software security.

Skills

Secure coding

Application security

SAST/SCA tooling

English communication

Education

IT experience 4–6 years

Tools

Fortify

Nexus Lifecycle

Azure

Job description

Secure Coding / Application Security Engineer (ID: 4143)

As a Secure Coding / Application Security Engineer, you will:

• Maintain and improve application security by implementing secure coding practices and standards.
• Analyse and investigate security vulnerabilities identified through SAST and SCA tools.
• Work with security tools such as Fortify, Nexus Lifecycle, or similar platforms.
• Help development teams understand security findings and implement appropriate fixes.
• Support developers in identifying, resolving, and preventing code vulnerabilities.
• Maintain and improve secure coding standards, guidelines, and best practices.
• Fine-tune security tool rulesets to reduce false positives and improve detection quality.
• Contribute to internal security tools, including repository scanning solutions.
• Explore emerging security risks, including AI-driven threats and agentic development.
• Collaborate with development teams to continuously improve software security.

What You Bring to the Table:

• 4–6 years of overall IT experience in software development, secure coding, or application security.
• Hands-on experience in Secure Coding and Application Security.
• Proficiency in at least one programming language.
• Experience with SAST and SCA security tools such as Fortify, Nexus Lifecycle, or similar tools.
• Knowledge of vulnerability analysis, assessment, and prioritisation.
• Understanding of secure software development practices and security standards.
• Exposure to Microsoft Azure, Agile methodologies, and DevOps practices.

You should possess the ability to:

• Analyse security findings and identify their potential impact.
• Guide developers in understanding and resolving application security vulnerabilities.
• Communicate technical security concepts clearly to development teams.
• Improve security scanning configurations and reduce false-positive findings.
• Work collaboratively with multiple development teams in a large corporate environment.
• Adapt to emerging security challenges, including AI-driven attacks.
• Take a proactive, curious, and practical approach to problem-solving.
• Communicate effectively in English.

What We Bring to the Table:

• An opportunity to work on enterprise-level application security initiatives.
• Exposure to secure software development practices and modern security tools.
• Opportunities to collaborate with experienced development and security teams.
• Hands-on involvement in improving security standards, processes, and tooling.
• An opportunity to contribute to emerging areas of application security.