Senior Application Security Engineer

Iceberg; Amsterdam; Hybrid; EUR 70,000 - 90,000; Part time

Job summary

A rapidly growing organization in the digital asset space is seeking an experienced Application Security Engineer to join their team in Amsterdam. In this mid-senior level role, you will ensure the security of applications and platforms, perform deep code reviews, and guide secure design practices. The right candidate has over 8 years of experience in application security and strong knowledge of secure coding practices. This position offers a hybrid work setup with 2 days per week onsite.

Qualifications

• 8+ years’ experience in application or product security engineering.
• Strong knowledge of secure coding practices and OWASP Top 10.
• Experience with cloud environments and Linux-based systems.

Responsibilities

• Perform deep code reviews to uncover vulnerabilities.
• Work alongside product and development teams to architect secure applications.
• Manage the bug bounty programme and validate issues.

Skills

Application security

Secure coding practices

Communication skills

Knowledge of OWASP Top 10

Experience with cloud environments (AWS, Azure, GCP)

Tools

SAST tools

DAST tools

SCA tools

Job description

Application Security Engineer – Amsterdam (Hybrid)

I’m working with a rapidly growing organisation in the digital assets/financial services space that is looking for an experienced Application Security Engineer to join their team in Amsterdam. This role sits at the heart of their development lifecycle, ensuring that security is embedded into every stage of the SDLC and that their trading platforms and customer‑facing applications remain secure, resilient, and compliant.

You’ll partner closely with developers, product owners, and security colleagues to identify vulnerabilities, improve processes, and guide the secure design of applications. The right person will have deep technical knowledge of application security, hands‑on experience with modern security tooling, and the ability to work cross‑functionally in a high‑paced environment.

Key Responsibilities

• Perform deep code reviews to uncover vulnerabilities such as logic flaws and race conditions.
• Work alongside product and development teams to architect secure applications and provide ongoing guidance.
• Set up, configure, and maintain SAST, DAST, and SCA tools.
• Manage the bug bounty programme, validating and prioritising issues raised by external researchers.
• Plan and coordinate application security assessments, including black‑box and red/purple team exercises.
• Ensure compliance with frameworks and standards such as SOC 2, ISO 27001, and GDPR.
• Conduct security due diligence on third‑party systems and integrations.

What We’re Looking For

• 8+ years’ experience in application or product security engineering, ideally within financial services, fintech, or crypto.
• Strong knowledge of secure coding practices, OWASP Top 10, and modern application architectures.
• Experience with cloud environments (AWS, Azure, or GCP) and Linux‑based systems.
• Familiarity with secure SDLC processes and automation.
• Strong communicator, confident working with developers and senior stakeholders alike.

Hybrid setup with 2 days per week onsite in Amsterdam.

Please note: visa sponsorship is not available for this role, so candidates must have the right to work in the Netherlands.

Seniority Level

Mid‑Senior level

Employment Type

Contract

Job Function

Financial Services and Banking