Application Security Engineer

FareHarborAmsterdamHybridFull-time21 Sept 2026

FareHarbor is seeking a full-time Application Security Engineer to join its Security Engineering team in Amsterdam. The role focuses on application security, secure SDLC, CI/CD security controls, and vulnerability remediation, requiring strong hands-on experience in application security and programming.

What you'll do

Work closely with product, platform, and security teams to ensure security is an integral part of our SDLC
Perform application security reviews, code reviews, threat modeling, and design reviews for new and existing features, promote application security practices across engineering teams
Identify, assess, and help remediate vulnerabilities in applications, APIs, services, and GitLab CI/CD pipelines by implementing and maintaining application security controls such as security policies, SAST, DAST, SCA, container scanning, and other CI/CD security controls
Support assessment and remediation such as for penetration test findings, bug bounty findings, vulnerability scan results, internal or external audit by providing technical input, documentation, and evidence
Write and maintain code and automation to support application security workflows, security tooling, vulnerability management, detection, and CI/CD security controls
Work with engineering teams to provide guidance on secure coding practices, application architecture, authentication, authorization, API security, secrets management, and secure deployment patterns
Support security initiatives, such as IAM, AWS WAF, Help fine-tune security monitoring and detection capabilities, including Elastic SIEM rules, WAF policies, alerting logic, logging improvements, and security automation
Participate in security alert triage, investigation, and incident response activities when needed
Participate in the security on-call rotation

What you need

Must-have

Application SecuritySecure SDLCWeb/API SecurityOWASP Top 10Threat ModelingCode ReviewsDesign ReviewsGitLab CI/CD

Nice-to-have

PentestingOSCPOSWEOSWAGWAPTGWEBCISSPCCSP

Soft skills

CommunicationCollaborationProactive attitudeProblem-solvingRelationship buildingIndependenceOwnership

Application SecurityTravel ArrangementsInformation TechnologyFull-timeOn-siteAmsterdamSecurity EngineeringSDLCCI/CDVulnerability Management

/What you'll do

/What you need

Must-have

Nice-to-have

Soft skills

What you'll do

What you need