> Markdown version of [/jobs/ext/2046141-security-engineer-api-and-ai-security](https://www.wearedevelopers.com/jobs/ext/2046141-security-engineer-api-and-ai-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Engineer - API and AI Security - **Company:** ABN AMRO Bank N.V. - **Location:** Amstelveen, Netherlands (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** JavaScript (Programming Language), Application Programming Interfaces (APIs), Amazon Web Services, Application Layers, Microsoft Azure, Code Review, Cyber Security, Corona (Software Development Kit), Data Governance, Python (Programming Language), Network Security, OAuth, OpenID, Windows PowerShell, Scrum Methodology, Secure Coding, Large Language Models, Software Security, Containerization, Kubernetes, Api Gateway - **Published:** August 14, 2026 - **Apply:** https://www.werkenbijabnamro.nl/vacature/9492/application-security-engineer-api-and-ai-security?utm_id=CP0003015&utm_source=careerguide&utm_medium=referral&utm_campaign=EB-jobboards&utm_content=vacature ## About the Role * Hands-on application security experience with modern web services, microservices, and REST/GraphQL APIs. * Strong knowledge of OAuth2/OIDC, JWT, mTLS, API gateways, and identity/access patterns. * Familiarity with AI security concepts (LLM threat models, data governance, secure evaluation, red teaming). * Proficiency in at least one programming language (e.g., Python, Java, Go, JavaScript) and secure coding practices. * Experience with cloud platforms and containerized deployments (e.g., AWS/Azure/GCP, Kubernetes)., * Proactive problem-solver: You thrive in an Agile/Scrum team, briging continuous improvement midnest and a passion for data-driven decision making * AppSec & API Security Expertise: You bring hands-on experience with dedicated API security tooling (such as Salt, Noname/Akamai, or Sequence) alongside modern WAF solutions. You know how to inspect API traffic, evaluate specs, and secure application endpoints. * Developer Empathy & Advisory Skills: You don't just throw vulnerability reports over the fence. You communicate clearly with development teams, providing practical, developer-friendly remediation steps that keep velocity high while protecting the bank. * Solid Network & Cloud Foundation: You understand enterprise network security architecture, hybrid cloud environments (Microsoft Azure, VMware), and industry frameworks like NIST, CIS Controls, and MITRE ATT&CK. * Curious Cyber Defender Mindset: You stay ahead of emerging tech trends-from AI integrations to new API protocols-and bring a continuous learning attitude, scripting capabilities (Python/PowerShell), and a knack for analytical problem-solving. ## Description Role purpose: Strengthen the security of modern applications by protecting APIs and AI-enabled systems, reducing risk across the software development lifecycle, and enabling secure product delivery through practical engineering and guidance., * Design and implement security controls for API security (authentication/authorization, rate limiting, schema validation, abuse prevention). * Assess and mitigate risks in AI/ML and LLM-integrated applications, including prompt injection, data leakage, and model supply-chain threats. * Build and maintain secure-by-default patterns, reference architectures, and reusable libraries for development teams. * Perform threat modeling, security architecture reviews, and code reviews for high-impact services. * Integrate security testing into CI/CD (SAST, DAST, SCA, secrets scanning) and drive remediation to closure. * Define and monitor security requirements, logging, and alerting for APIs and AI features in production. * Partner with engineering, product, and compliance teams to align security with delivery timelines and business goals., Rather than functioning as a passive reviewer, you actively collaborate with development and platform teams. You analyze real-time telemetry from our API security platforms, translate complex vulnerability findings into practical, developer-friendly remediation guidance, and review API architectures-including emerging frontiers like AI and Model Context Protocol (MCP) platform security. You'll spend your time tuning Web Application Firewalls (WAF), API and AI secuerity platforms, assisting with firewall change approvals, and consulting directly with feature teams to ensure security is built into products from the start., You are a security engineer who understands both sides of the coin: the intricate mechanics of network defense and the fast-paced reality of modern software development. You excel at taking complex threat telemetry and turning it into clear, empathetic guidance that developers can actually act on. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Lessons learned from observing a billion API requests](https://www.wearedevelopers.com/videos/1574-lessons-learned-from-observing-a-billion-api-requests) - [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Instant KAI Sandboxes with vCluster: Multi-Tenant, Multi-Scheduler GPU Sharing](https://www.wearedevelopers.com/videos/100333-instant-kai-sandboxes-with-vcluster-multi-tenant-multi-scheduler-gpu-sharing) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) ## Related Articles - [How to Find Tech Jobs in Amsterdam](https://www.wearedevelopers.com/magazine/279-how-to-find-tech-jobs-in-amsterdam) - [How to land a developer job in Amsterdam](https://www.wearedevelopers.com/magazine/36-how-to-land-a-developer-job-in-amsterdam) - [Best Companies in the Netherlands: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/193-best-companies-in-the-netherlands-top-25-companies-in-2023) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Software Developer Salary in The Netherlands [2023]](https://www.wearedevelopers.com/magazine/217-software-developer-salary-in-the-netherlands-2023) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)