About this role
Amstelveen Senior 40 uur per week Startdatum op 1 december Interim opdracht 10 Uur geleden Kyndryl Senior Application Security Consultant We are looking for an experienced Senior Application Security Consultant to assess and improve the security of applications. You will perform hands-on security assessments, penetration tests and secure code reviews, identifying vulnerabilities and advising development teams on effective remediation. You will work closely with development, DevOps and architecture teams to integrate security into the software development lifecycle (DevSecOps).
Key Responsibilities
- Perform application security assessments, penetration tests and secure code reviews.
- Identify, validate and prioritize application vulnerabilities.
- Execute and analyse SAST, DAST and SCA scans.
- Provide actionable remediation recommendations and secure coding advice.
- Integrate security testing tools into CI/CD pipelines.
- Advise development teams on application security and DevSecOps practices.
- Contribute to threat modelling and security architecture reviews.
Required Experience & Skills
- Senior-level experience (Band 7/8) in Application Security or Offensive Security.
- Hands-on experience with security testing tools such as Burp Suite, OWASP ZAP, Snyk, SonarQube, Checkmarx, Fortify, Semgrep or GitHub Advanced Security.
- Knowledge of security frameworks and methodologies, including OWASP, MITRE ATT&CK and NIST SP 800-115.
- Experience with threat modelling techniques such as STRIDE, PASTA or Attack Trees.
- Experience with CI/CD pipelines and DevSecOps.
- Knowledge of Azure and on-premise VMware environments.
- Understanding of software development and application architecture.
- Ability to translate technical findings into clear, actionable recommendations.
Certifications (Preferred) CISSP, CISM, OSWA, OSWE or OSCP. Personal Competencies - Independent, proactive and accountable. - Strong analytical and pro...