2 X Security engineer DL wo 17.00

Domain Expert Secure Coding / Application Security

Are you passionate about secure software development and do you enjoy helping development teams build better, safer applications? For a large financial enterprise organization, we are looking for a Domain Expert Secure Coding / Application Security who can bridge the gap between security and software development.

In this role, you will join a central knowledge team focused on improving software development practices, standards, guidelines, and secure delivery across the organization. You will work closely with development teams to help them understand, prioritize, and resolve security findings, while also contributing to smarter tooling, better standards, and a stronger security posture.

You will operate at the intersection of application security, software engineering, and developer enablement. Some days you will dive deep into code and security findings; on other days, you will work with teams to improve processes, reduce noise in tooling, or explore emerging risks such as AI-driven attacks and agentic development.

Your responsibilities include:

Maintaining and improving the organization’s secure software development posture

Maintaining and evolving Secure Coding Standards

Triaging and analyzing findings from SAST and SCA tools such as Fortify, Nexus Lifecycle, or similar solutions

Helping developers understand what security findings mean and how to resolve them effectively

Supporting development teams in fixing vulnerabilities in their code

Improving and fine-tuning rulesets to reduce false positives and increase the quality of findings

Contributing to internally developed security tooling, including repository scanning solutions

Exploring new security risks, including AI-driven threats and secure agentic development

Sharing knowledge and helping teams improve their secure coding capabilities over time

We are looking for someone who is comfortable working with code, understands application security, and enjoys helping others improve. You do not need to know everything, but you should be curious, pragmatic, analytical, and able to communicate clearly with technical teams.

You bring:

Experience in secure coding and application security

Strong software development skills in at least one programming language

Experience with SAST and SCA tooling, such as Fortify, Nexus Lifecycle, or comparable tools

Experience analyzing, validating, and prioritizing secure coding findings

The ability to explain technical security topics clearly to developers

Strong stakeholder awareness in a large corporate environment

Fluency in English

Why this role?

This is an opportunity to make a real impact on secure software development at scale. You will help development teams work more effectively with security findings, improve the quality of security tooling, and contribute to standards and solutions that make secure development easier across a large, complex technology environment.

You will be part of a role where no two days are the same: combining hands-on technical analysis, collaboration with development teams, tooling improvement, and forward-looking security topics.