The Role
Maintain and improve application security through secure coding standards, vulnerability analysis, and SAST/SCA tooling. Guide development teams in resolving code vulnerabilities, tune scanning rules to reduce false positives, contribute to repository security tools, and monitor emerging threats including AI-driven attacks. Collaborate across development and security teams to strengthen software security practices, tooling, and processes.
Summary Generated by Built In
As a Secure Coding / Application Security Engineer, you will:
- Maintain and improve application security by implementing secure coding practices and standards.
- Analyse and investigate security vulnerabilities identified through SAST and SCA tools.
- Work with security tools such as Fortify, Nexus Lifecycle, or similar platforms.
- Help development teams understand security findings and implement appropriate fixes.
- Support developers in identifying, resolving, and preventing code vulnerabilities.
- Maintain and improve secure coding standards, guidelines, and best practices.
- Fine-tune security tool rulesets to reduce false positives and improve detection quality.
- Contribute to internal security tools, including repository scanning solutions.
- Explore emerging security risks, including AI-driven threats and agentic development.
- Collaborate with development teams to continuously improve software security.
What You Bring to the Table:
- 4–6 years of overall IT experience in software development, secure coding, or application security.
- Hands-on experience in Secure Coding and Application Security.
- Proficiency in at least one programming language.
- Experience with SAST and SCA security tools such as Fortify, Nexus Lifecycle, or similar tools.
- Knowledge of vulnerability analysis, assessment, and prioritisation.
- Understanding of secure software development practices and security standards.
- Exposure to Microsoft Azure, Agile methodologies, and DevOps practices.
You should possess the ability to:
- Analyse security findings and identify their potential impact.
- Guide developers in understanding and resolving application security vulnerabilities.
- Communicate technical security concepts clearly to development teams.
- Improve security scanning configurations and reduce false-positive findings.
- Work collaboratively with multiple development teams in a large corporate environment.
- Adapt to emerging security challenges, including AI-driven attacks.
- Take a proactive, curious, and practical approach to problem-solving.
- Communicate effectively in English.
What We Bring to the Table:
- An opportunity to work on enterprise-level application security initiatives.
- Exposure to secure software development practices and modern security tools.
- Opportunities to collaborate with experienced development and security teams.
- Hands-on involvement in improving security standards, processes, and tooling.
- An opportunity to contribute to emerging areas of application security.
Let’s Connect
Want to discuss this opportunity in more detail? Feel free to reach out.
Recruiter: Hema Murali
Phone: +31 20 369 0609 ; Extn :148
LinkedIn: https://www.linkedin.com/in/hema-murali-315999329/
Skills Required
- 4-6 years of overall IT experience in software development, secure coding, or application security
- Hands-on experience in secure coding and application security
- Proficiency in at least one programming language
- Experience with SAST and SCA security tools such as Fortify or Nexus Lifecycle
- Knowledge of vulnerability analysis, assessment, and prioritisation
- Understanding of secure software development practices and security standards
- Exposure to Microsoft Azure
- Exposure to Agile methodologies and DevOps practices
- Ability to communicate effectively in English
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
STAFIDE is a Netherlands-based niche technology talent consulting company operating across Europe. It helps organizations identify, recruit, and deploy technology professionals in areas including cybersecurity, cloud engineering, software development, data analytics, ERP, infrastructure, and digital transformation. Its services include recruitment, workforce engagement, secondment, onboarding support, workforce deployment, and workforce analytics that support technology hiring and expansion.
