Introduction
Assignment start date 01 July 2025
Assignment end date 30 June 2026
Possible extension YES
Hours per week 36,0
Organization
The Development Services department is the knowledge center within ABN AMRO for everything concerning software development. It’s goal is to continuously improve the quality of the software development process and it’s deliverables. To accomplish that mission, we harvest best practices from the development community and translate these into standards and guidelines. Common for all technologies is the need for strong security. The Secure Coding (SECO) team takes care of all matters concerning the security of software development. A Domain Expert for SECO helps development teams in the organisation with improving the quality of security of their products.
Team activities
The SECO team manages the ABN AMRO ruleset for tools like Fortify and NexusLC in collaboration with the ABN AMRO developer communities and QA authority. We look into security issues in the Code and give teams advice on how to remediate this. If teams create tickets to request exceptions, we evaluate these cases. Also we investigate possibilities to improve code security within the bank and we allocate a part of our time to investigate existing or develop new security tools.
Function
Secure coding standards and guidelines
Secure software development tools and processes
Coaching ABN AMRO staff on secure development practices
Fuelling the Security Triangle community
Requirements
As a Domain Expert for SECO, the candidate must be an expert in software development security (methodologies) and associated tools. Must have technical experience:
MUST:
Vulnerabilities:
– OWASP
– SANS
Threat modelling: STRIDE
Development:
– Proficient in at least one major programming language (Java / Javascript / Python / C# / Swift / Go)
Public Cloud technology:
– Azure
– Azure DevOps
Versioning tools:
– Git
– Bitbucket
Build tools:
– Maven
– Gradle
QA tools:
– SonarQube
– Fortify
– Nexus Lifecycle
Must have personal skills:
* Fluent English (Dutch not required)
* Coaching & Feedback
* Taking ownership
* Training
* Convincing
* Enterprise awareness
* Intercultural awareness
Information
Michael Siep +31(0)20-3337629
Application
Michael Siep +31(0)20-3337629