Start: asap
Period: 6 months
Possible extenion: YES
40 hours per week
ZZP possible
Job description
We are looking for an experienced Senior Application Security Consultant to assess and improve the security of applications. You will perform hands-on security assessments, penetration tests and secure code reviews, identifying vulnerabilities and advising development teams on effective remediation. You will work closely with development, DevOps and architecture teams to integrate security into the software development lifecycle (DevSecOps).
Key Responsibilities
Perform application security assessments, penetration tests and secure code reviews.
Identify, validate and prioritize application vulnerabilities.
Execute and analyse SAST, DAST and SCA scans.
Provide actionable remediation recommendations and secure coding advice.
Integrate security testing tools into CI/CD pipelines.
Advise development teams on application security and DevSecOps practices.
Contribute to threat modelling and security architecture reviews.
Requirements
Required Experience & Skills
Senior-level experience (Band 7/8) in Application Security or Offensive Security.
Hands-on experience with security testing tools such as Burp Suite, OWASP ZAP, Snyk, SonarQube, Checkmarx, Fortify, Semgrep or GitHub Advanced Security.
Knowledge of security frameworks and methodologies, including OWASP, MITRE ATT&CK and NIST SP 800-115.
Experience with threat modelling techniques such as STRIDE, PASTA or Attack Trees.
Experience with CI/CD pipelines and DevSecOps.
Knowledge of Azure and on-premise VMware environments.
Understanding of software development and application architecture.
Ability to translate technical findings into clear, actionable recommendations.
Certifications (Preferred)
CISSP, CISM, OSWA, OSWE or OSCP.
Personal Competencies
Independent, proactive and accountable.
Strong analytical and problem-solving skills.
Excellent communication and stakeholder management skills.
Able to translate complex technical risks into business impact.
Lees volledige vacature
Wat gaat er gebeuren?
1
Application
After you apply, we will review your CV and compare it with other applications. If you are suitable, we will call you to discuss your experience, availability, and rate. If you are not suitable or less suitable than other applicants, we will politely decline your application.
2
Propose to customer
After checking suitability, availability and rate, we will recommend you to the client and you will usually receive a response from the client within 5 working days as to whether they are interested and would like to arrange an interview.
3
Interview
After the interview, the client may wish to conduct a second or, in some cases, a third interview. If the client decides to hire you, the start date and onboarding process will be determined.
4
Start / Onboarding
In order to get started, an onboarding procedure is initiated in which formalities are completed. This includes submitting personal details, passport and, if necessary, Chamber of Commerce registration in order to draw up a contract. In some cases, screening by an external agency commissioned by the client may be required. Once this has been completed, the assignment can begin!