Application Security Engineer

The role

FareHarbor is looking for a full time Application Security Engineer to join our Security Engineering team in Amsterdam. This role will primarily focus on application security and secure SDLC initiatives, while also supporting security monitoring efforts. We are looking for someone who can work closely with our Senior Application Security Engineer on application security reviews, secure development practices, CI/CD security controls, application vulnerability remediation, and broader security engineering initiatives.

The ideal candidate is comfortable operating across multiple areas of security, with strong application security expertise and the ability to contribute to automation, detection engineering, and incident response.

What you need

Technical skills

Senior engineer with strong experience in application security, secure SDLC, strong technical knowledge of web/API security, common vulnerabilities, and practical mitigation strategies for OWASP Top 10.
Proven experience performing application security reviews, including code reviews, design reviews, and threat modeling, as well as supporting the remediation of security findings from penetration tests, vulnerability scans, and security audits.
Experience implementing security controls in GitLab CI/CD pipeline, such as SAST, DAST, SCA, secret scanning, IaC scanning, dependency scanning etc.
Strong hands-on programming experience in Python or another high-level language such as Go or Java, with the ability to independently write, review, debug, and maintain code
Good understanding of AWS security concepts, including IAM, WAF, Kubernetes, containers, and infrastructure as code
Experience with security monitoring, alert tuning, SIEM use cases, logging, detection engineering, or WAF rule tuning
Pentesting experience is a plus
Ability to assess risk, prioritize vulnerabilities, and balance security requirements with business needs and engineering realities
Familiarity with security and compliance frameworks such as NIST, PCI DSS, GDPR, SOC 2, SOX, or similar
Good understanding of incident response, security investigations, and technical incident management
Experience with API security, microservices security, and distributed application architectures
Experience with AI-assisted security automation for AppSec triage, vulnerability assessment, detection tuning, and security monitoring workflows using tools such as Cursor, Tines, Elastic, or similar.

Soft skills

Strong communication skills, able to explain technical security risks clearly to both technical and non-technical stakeholders
Able to work effectively with product, engineering, platform, infrastructure, and security teams
Proactive attitude, always on the look-out for improving your and our way of working
Strong problem-solving skills and ability to analyze complex systems and make decisions based on risk, data, and best practices
Strong relationship building skills across diverse cross-functional teams
Comfortable operating independently and taking ownership of security initiatives from discovery through implementation
Able to provide practical security guidance that enables teams to move quickly and securely

Application Security Engineer

The role

Application Security Engineer

The role

What you will do

What you need

Technical skills

Soft skills

Nice to have

FareHarbor Core Values

Pay and benefits

About FareHarbor

Similar jobs at other companies

Security & IT Engineer

Senior Application Security Engineer

Staff Engineer, Backend

Global Safety & Security Leader

(Senior) Frontend Engineer

Founding Security Engineer

FareHarbor