Application Security Engineer - API and AI Security

At a glance

We are looking for a highly motivated Application Security Engineer with a strong understanding of network security. Do you want to work in a Network Security team and focus on strengthening the bank’s WAF and API security capabilities? Do you like to analyse findings from our API security platform, translate them into clear security risks and practical remediation guidance, and work closely with development teams to help them resolve vulnerabilities effectively? Interested in joining a dynamic and fast-changing environment that allows you to develop yourself broadly and become one of the knowledgeable pillars we can rely on in our organisation? Do you want to be part of an international team that safeguards the security posture of ABN AMRO? Do you have a hands-on mentality and want to make an impact? Then we’re looking for you! Please continue reading and apply online.

Your job

As an Application Security Engineer specializing in WAF and API Security, you are a crucial defender of ABN AMRO's application layer. Operating within the CISO Cyber Defence department, your primary goal is to ensure that application-facing network security controls are seamlessly integrated across the bank’s entire IT ecosystem.

Rather than functioning as a passive reviewer, you actively collaborate with development and platform teams. You analyze real-time telemetry from our API security platforms, translate complex vulnerability findings into practical, developer-friendly remediation guidance, and review API architectures—including emerging frontiers like AI and Model Context Protocol (MCP) platform security. You'll spend your time tuning Web Application Firewalls (WAF), API and AI secuerity platforms, assisting with firewall change approvals, and consulting directly with feature teams to ensure security is built into products from the start.

Working environment

You'll join the CISO department, which connects client, bank, and societal interests through information security. With about 500 global staff, CISO ensures the bank's security and pursues innovative solutions in a fast-changing, international environment. The office is in Amstelveen near Amsterdam, and English is the main language. Within CISO, the Cyber Defence department has around 150 employees across 7 sub-departments.

We offer you the opportunity to contribute to the future of the cyber security of ABN AMRO. While using your known skills, you will learn to use the newest tools and gain knowledge from your co-workers. Besides learning new hard skills, we will also focus on your personal (soft) skills that you would like to improve. We offer training opportunities, lots of growing opportunities and fun times with colleagues. 

Your profile

You are a security engineer who understands both sides of the coin: the intricate mechanics of network defense and the fast-paced reality of modern software development. You excel at taking complex threat telemetry and turning it into clear, empathetic guidance that developers can actually act on.

What makes you a great fit:

• Proactive problem-solver: You thrive in an Agile/Scrum team, briging continuous improvement midnest and a passion for data-driven decision making
• AppSec & API Security Expertise: You bring hands-on experience with dedicated API security tooling (such as Salt, Noname/Akamai, or Sequence) alongside modern WAF solutions. You know how to inspect API traffic, evaluate specs, and secure application endpoints.
• Developer Empathy & Advisory Skills: You don't just throw vulnerability reports over the fence. You communicate clearly with development teams, providing practical, developer-friendly remediation steps that keep velocity high while protecting the bank.
• Solid Network & Cloud Foundation: You understand enterprise network security architecture, hybrid cloud environments (Microsoft Azure, VMware), and industry frameworks like NIST, CIS Controls, and MITRE ATT&CK.
• Curious Cyber Defender Mindset: You stay ahead of emerging tech trends—from AI integrations to new API protocols—and bring a continuous learning attitude, scripting capabilities (Python/PowerShell), and a knack for analytical problem-solving.

We are offering

We believe it is important to be a good employer. Joining us means stepping into a role with impact, supported by excellent employment conditions that foster your job satisfaction, development, and wellbeing.

In addition, we offer:

• An attractive gross monthly salary based on a 36-hour work week, including holiday allowanceand a flexible benefit budget.
• An excellent pension scheme, ensuring that you are well prepared for the future.
• Flexibility in working: working from home is possible in consultation with your team and depending on your role. We will provide an ergonomic home office setup for you.
• Plenty of room for relaxation with five weeks of vacation per year, supplemented by two mandatory days off. You can also purchase up to four additional weeks of vacation annually.
• Five “Banking for better days”: extra days off that you can use for personal development or volunteer work.
• Personal development is key: you receive a development budget of €1,000 per year, which can accumulate up to €3,000.
• An annual public transport pass with free public transportation throughout the Netherlands for both business and private use.

You can find more information about our employment conditions and salary scales in our Collective Labour Agreement (CLA), which applies to this vacancy.