FareHarbor is seeking a full-time Application Security Engineer to join our Security Engineering team in Amsterdam, Netherlands. The role focuses on application security and secure SDLC initiatives, while also supporting security monitoring. You will work closely with product, platform, and security teams to embed security into the SDLC, perform application security reviews, code reviews, threat modeling, and design reviews for new and existing features, and promote secure coding practices across engineering. You will identify, assess, and remediate vulnerabilities in applications, APIs, services, and GitLab CI/CD pipelines by implementing and maintaining security controls such as SAST, DAST, SCA, container scanning, and other CI/CD security controls. You will support remediation of findings from penetration tests, bug bounty findings, vulnerability scans, and audits, and provide guidance on secure architecture, authentication and authorization, API security, secrets management, and secure deployment patterns. You will contribute to security initiatives such as IAM, AWS WAF, and fine-tuning monitoring and detection capabilities, including Elastic SIEM rules, WAF policies, alerting logic, and logging improvements, as well as security automation. You will participate in security alert triage, investigation, and incident response, and help with the security on-call rotation. Requirements include senior-level experience in application security and secure SDLC, deep knowledge of web and API security and OWASP Top 10, and track record of performing security reviews and remediatio

FareHarbor is seeking a full-time Application Security Engineer to join our Security Engineering team in Amsterdam, Netherlands. The role focuses on application security and secure SDLC initiatives, while also supporting security monitoring. You will work closely with product, platform, and security teams to embed security into the SDLC, perform application security reviews, code reviews, threat modeling, and design reviews for new and existing features, and promote secure coding practices across engineering. You will identify, assess, and remediate vulnerabilities in applications, APIs, services, and GitLab CI/CD pipelines by implementing and maintaining security controls such as SAST, DAST, SCA, container scanning, and other CI/CD security controls. You will support remediation of findings from penetration tests, bug bounty findings, vulnerability scans, and audits, and provide guidance on secure architecture, authentication and authorization, API security, secrets management, and secure deployment patterns. You will contribute to security initiatives such as IAM, AWS WAF, and fine-tuning monitoring and detection capabilities, including Elastic SIEM rules, WAF policies, alerting logic, and logging improvements, as well as security automation. You will participate in security alert triage, investigation, and incident response, and help with the security on-call rotation. Requirements include senior-level experience in application security and secure SDLC, deep knowledge of web and API security and OWASP Top 10, and track record of performing security reviews and remediatio