Secure Coding Domain Expert – Application Security (ID: 4089)
Key Skills
Job Description
- Maintain and improve the organisation’s application security posture by promoting secure software development practices across development teams.
- Define, maintain, and continuously improve secure coding standards, guidelines, and best practices across different technologies.
- Analyse, triage, and prioritise security findings generated by Static Application Security Testing (SAST) and Software Composition Analysis (SCA) tools.
- Work with security tools such as Fortify, Nexus Lifecycle, or similar platforms to identify vulnerabilities, assess risks, and recommend appropriate remediation.
- Support developers in understanding security findings, investigating root causes, and implementing effective fixes in application code.
- Improve security tooling by fine-tuning detection rules, reducing false positives, enhancing finding quality, and increasing the effectiveness of security scans.
- Contribute to internally developed security tools, including repository scanning solutions, and help improve automation within the secure development lifecycle.
- Research emerging application security risks, including AI-driven attacks and agentic development, while sharing knowledge and helping development teams adopt more secure practices.
- 4–6 years of overall professional experience, with relevant experience in secure coding, application security, or software development security.
- Practical experience in secure coding principles, application vulnerability assessment, and identifying security weaknesses in software.
- Proficiency in at least one programming language, with the ability to understand application code and support vulnerability remediation.
- Hands-on experience with SAST and SCA tools such as Fortify, Nexus Lifecycle, or equivalent security analysis platforms.
- Experience analysing, triaging, prioritising, and explaining security findings based on their severity, impact, and remediation requirements.
- Understanding of secure software development practices and integration of security checks into DevOps and CI/CD pipelines.
- Familiarity with Agile ways of working and continuous integration and continuous delivery (CI/CD) practices; Microsoft Azure is a listed competency.
- Strong communication skills, fluent English, a pragmatic approach to problem-solving, and the ability to work effectively within a large corporate organisation.
- Interpret SAST and SCA findings, distinguish actionable vulnerabilities from false positives, and recommend appropriate remediation.
- Explain technical security issues clearly to developers and guide them towards practical, effective fixes.
- Review application code and assess security risks across different technologies and development environments.
- Maintain and improve secure coding standards, ensuring that guidelines remain relevant and practical for development teams.
- Fine-tune security scanning rules and tooling configurations to improve detection accuracy and reduce unnecessary findings.
- Collaborate with developers, security specialists, and other stakeholders to integrate security into everyday development activities.
- Investigate emerging security threats, including risks associated with AI-driven attacks and agentic software development.
- Share security knowledge, influence secure development practices, and balance security requirements with practical delivery needs.
- The opportunity to contribute to application security and secure coding initiatives within a large enterprise banking environment.
- Exposure to security analysis tools, including Fortify, Nexus Lifecycle, and similar SAST/SCA platforms.
- Opportunities to work closely with software development teams across different technologies and applications.
- Involvement in improving security tooling, scanning rules, repository analysis, and vulnerability remediation processes.
- Opportunities to contribute to secure coding standards and strengthen security throughout the software development lifecycle.
- Exposure to evolving application security challenges, including AI-driven threats and agentic development.
- A collaborative environment that encourages knowledge sharing, continuous improvement, and pragmatic security solutions.
- The opportunity to influence secure software development practices and help teams deliver more secure applications.
Core Responsibilities
The Secure Coding Domain Expert will define and improve secure coding standards while analyzing and remediating security findings from SAST and SCA tools. They will also collaborate with development teams to integrate security into the CI/CD pipeline and research emerging threats like AI-driven attacks.
Requirements
Candidates must have 4-6 years of experience in application security or secure software development with proficiency in at least one programming language. Strong communication skills and hands-on experience with security analysis platforms like Fortify or Nexus Lifecycle are required.
Benefits
- Professional development
- Collaborative environment
- Knowledge sharing opportunities
About STAFIDE
Industry: Staffing and Recruiting
Company size: 11-50 employees
Headquartered in the Netherlands, STAFIDE specializes in Niche Tech Recruitment across Europe, connecting top talent with outstanding opportunities in the IT sector. Our data-driven recruitment model ensures the ideal match between candidates and employers, enhancing both skill alignment and cultural fit. With a strong focus on Skill-Based Hiring, we provide candidates with an in-depth understanding of the organization—whether for permanent positions or temporary assignments (interim opdrachten) like secondment (detachering)—strengthening employer branding for our clients as a recruitment company (uitzendbureau). In today’s fast-evolving tech landscape, we recognize the unique challenges companies face in sourcing highly skilled talent. Our advanced, AI-driven talent intelligence system (ATS) is specifically designed to prioritize Skill-Based Hiring for niche IT roles, empowering organizations to address talent shortages by identifying professionals with the expertise to drive innovation and growth. Whether you’re a company in search of exceptional talent or a professional seeking your next ICT role, STAFIDE is your strategic recruitment (werving en selectie) partner. Our deep expertise in the Dutch market, combined with a steadfast commitment to excellence, makes us the preferred choice for all your recruitment needs.