Key Skills

Job Description

Introduction 36 hours per week Start date: ASAP Duration: 1-year assignment with the possibility of extension Hybrid working. ZZP is allowed. Relocation is not possible. Job description The Development Services department is the knowledge center for everything concerning software development. It's goal is to continuously improve the quality of the software development process and it's deliverables. To accomplish that mission, we harvest best practices from the development community and translate these into standards and guidelines. Common for all technologies is the need for strong security. The Secure Coding (SECO) team takes care of all matters concerning the security of software development. A Domain Expert for SECO helps development teams in the organization with improving the quality of security of their products. In this role, you’ll work closely with development teams across the bank. You’ll help them understand and fix security findings, improve how our tooling works, and contribute to solutions that make secure development easier. You’ll also be involved in looking at new topics like AI-driven threats and agentic development. You’ll be working at the intersection of security and development, helping teams deal with vulnerabilities in an efficient and effective way. What you’ll be doing: - Maintain and improve our security posture. - Maintain Secure Coding Standards. - Triage and analyse findings from SAST & SCA tools like Fortify and Nexus Lifecycle. - Help developers understand what a security finding really means, and how they can solve it. - Support teams in fixing vulnerabilities in their code. - Improve and fine-tune rulesets to reduce noise and increase quality. - Contribute to internally developed tools such as our Repository Scanner (RESC). - Think along about how we handle new risks, including AI-driven attacks. - Share knowledge and help teams become more secure over time No two days are exactly the same some days you’ll be deep in code, other days you’ll be discussing solutions with teams or improving tooling. Requirements You’re someone who’s comfortable working with code and enjoys helping others improve. You don’t need to know everything, but you’re curious and pragmatic. What we’re looking for: - Experience in secure coding and application security. - Proficient in software development in at least one programming language. - Experience with SAST & SCA tools like Fortify, Nexus Lifecycle, or similar. - Experience in analysing and prioritising secure coding findings. - Able to communicate well with developers and explain things clearly. - Large corporate organisational sensitivity. - Fluent English.

Core Responsibilities

The role involves maintaining security standards and triaging findings from SAST and SCA tools to improve the organization's security posture. You will collaborate with development teams to remediate vulnerabilities and contribute to the development of internal security tooling.

Requirements

Candidates must have experience in secure coding, application security, and proficiency in at least one programming language. Strong communication skills and experience with SAST/SCA tools like Fortify or Nexus Lifecycle are required.