Senior Application Security Consultant

LinkiT
Amstelveen, Netherlands
2 days ago
Apply on www.werk.nl
Prepare application

Role details

Contract type
Contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Working hours
Regular working hours
Job source

Tech stack

Applications Architecture Software System Penetration Testing Microsoft Azure Burp Suite Cyber Security DevOps Github Open Web Application Security Fortify (Software) Secure Coding Software Engineering SonarQube
+8 more
Sonatype Software Security Mitre Att&ck Checkmarx Devsecops Static Application Security Testing Vmware Dynamic Application Security Testing

Job description

We are looking for an experienced Senior Application Security Consultant to assess and improve the security of applications., You will work closely with development, DevOps and architecture teams to integrate security into the software development lifecycle (DevSecOps). Key Responsibilities - Perform application security assessments, penetration tests and secure code reviews. - Identify, validate and prioritize application vulnerabilities. - Execute and analyse SAST, DAST and SCA scans. - Provide actionable remediation recommendations and secure coding advice. - Integrate security testing tools into CI/CD pipelines. - Advise development teams on application security and DevSecOps practices. - Contribute to threat modelling and security architecture reviews.

Requirements

You will perform hands-on security assessments, penetration tests and secure code reviews, identifying vulnerabilities and advising development teams on effective remediation., Required Experience & Skills - Senior-level experience (Band 7/8) in Application Security or Offensive Security. - Hands-on experience with security testing tools such as Burp Suite, OWASP ZAP, Snyk, SonarQube, Checkmarx, Fortify, Semgrep or GitHub Advanced Security. - Knowledge of security frameworks and methodologies, including OWASP, MITRE ATT&CK and NIST SP 800-115. - Experience with threat modelling techniques such as STRIDE, PASTA or Attack Trees. - Experience with CI/CD pipelines and DevSecOps. - Knowledge of Azure and on-premise VMware environments. - Understanding of software development and application architecture. - Ability to translate technical findings into clear, actionable recommendations. Certifications (Preferred) CISSP, CISM, OSWA, OSWE or OSCP. Personal Competencies - Independent, proactive and accountable. - Strong analytical and pro…

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.werk.nl
Prepare application

Good distractions

Loading talks and stories from around this role…