{"id":12748,"date":"2026-09-18T00:00:00","date_gmt":"2026-09-18T00:00:00","guid":{"rendered":"https:\/\/www.a2z-cm.com\/secure-coding-specialist\/"},"modified":"2026-09-18T09:00:10","modified_gmt":"2026-09-18T09:00:10","slug":"security-vulnerability-assessor-secure-coding","status":"publish","type":"post","link":"https:\/\/www.a2z-cm.com\/nl\/security-vulnerability-assessor-secure-coding\/","title":{"rendered":"Security &amp; Vulnerability Assessor (Secure Coding)"},"content":{"rendered":"<h4 class=\"cx_h4 cx2_introduction\">Introduction<\/h4>\n<div class=\"cx2_introduction\"><ul> <li>36 hours per week<\/li> <li>Start date: ASAP<\/li> <li>Duration: 1-year assignment with the possibility of extension&nbsp;<\/li> <li>Hybrid working.<\/li> <li>ZZP is allowed.<\/li> <li>Relocation is not possible.<\/li> <\/ul><\/div>\n\r\n<!--more-->\r\n\r\n<h4 class=\"cx_h4 cx2_function\">Function<\/h4>\n<div class=\"cx2_function\"><p>The Development Services department is the knowledge center within ABN AMRO for everything concerning software development. It&#8217;s goal is to continuously improve the quality of the software development process and it&#8217;s deliverables. To accomplish that mission, we harvest best practices from the development community and translate these into standards and guidelines. Common for all technologies is the need for strong security. The Secure Coding (SECO) team takes care of all matters concerning the security of software development. A Domain Expert for SECO helps development teams in the organisation with improving the quality of security of their products.<\/p> <p>In this role, you&rsquo;ll work closely with development teams across the bank. You&rsquo;ll help them understand and fix security findings, improve how our tooling works, and contribute to solutions that make secure development easier. You&rsquo;ll also be involved in looking at new topics like AI-driven threats and agentic development.<\/p> <p>You&rsquo;ll be working at the intersection of security and development, helping teams deal with vulnerabilities in an efficient and effective way.<\/p> <p><strong>What you&rsquo;ll be doing:<\/strong><\/p> <p>&#8211; Maintain and improve ABN AMRO&#8217;s security posture.<br>&#8211; Maintain Secure Coding Standards.<br>&#8211; Triage and analyse findings from SAST &amp; SCA &nbsp;tools like Fortify and Nexus Lifecycle.<br>&#8211; Help developers understand what a security finding really means, and how they can solve it.<br>&#8211; Support teams in fixing vulnerabilities in their code.<br>&#8211; Improve and fine-tune rulesets to reduce noise and increase quality.<br>&#8211; Contribute to internally developed tools such as our Repository Scanner (RESC).<br>&#8211; Think along about how we handle new risks, including AI-driven attacks.<br>&#8211; Share knowledge and help teams become more secure over time<br>No two days are exactly the same some days you&rsquo;ll be deep in code, other days you&rsquo;ll be discussing solutions with teams or improving tooling.<\/p><\/div>\n\r\n<h4 class=\"cx_h4 cx2_requirements\">Requirements<\/h4>\n<div class=\"cx2_requirements\"><p>You&rsquo;re someone who&rsquo;s comfortable working with code and enjoys helping others improve. You don&rsquo;t need to know everything, but you&rsquo;re curious and pragmatic.<\/p> <p><strong>What we&rsquo;re looking for:<\/strong><\/p> <p>&#8211; Experience in secure coding and application security.<br>&#8211; Proficient in software development in at least one programming language.<br>&#8211; Experience with SAST &amp; SCA tools like Fortify, Nexus Lifecycle, or similar.&nbsp;<br>&#8211; Experience in analysing and prioritising secure coding findings.<br>&#8211; Able to communicate well with developers and explain things clearly.<br>&#8211; Large corporate organisational sensitivity.<br>&#8211; Fluent English.<\/p><\/div>\n\r\n\r\n<h4 class=\"cx_h4 cx2_information\">Information<\/h4>\n<div class=\"cx2_information\"><p>Jobs A2Z-CM +31(0)20-3337629<\/p><\/div>\n\r\n<h4 class=\"cx_h4 cx2_application\">Application<\/h4>\n<div class=\"cx2_application\"><p>Jobs A2Z-CM +31(0)20-3337629<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"<h4 class=\"cx_h4 cx2_introduction\">Introduction<\/h4>\n<div class=\"cx2_introduction\"><ul> <li>36 hours per week<\/li> <li>Start date: ASAP<\/li> <li>Duration: 1-year assignment with the possibility of extension&nbsp;<\/li> <li>Hybrid working.<\/li> <li>ZZP is allowed.<\/li> <li>Relocation is not possible.<\/li> <\/ul><\/div>","protected":false},"author":8,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19,106],"tags":[102,108,24],"class_list":["post-12748","post","type-post","status-publish","format-standard","hentry","category-publications","category-security","tag-amstelveen","tag-security","tag-the-netherlands","functiongroups-security","worklocation-amstelveen","country-the-netherlands","procedure-contracting","business-line-default","hours-per-week-31","pubid-list-17096"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Security &amp; Vulnerability Assessor (Secure Coding) : A2Z-CM<\/title>\n<meta name=\"description\" content=\"36 hours per week Start date: ASAP Duration: 1-year assignment with the possibility of extension&nbsp; Hybrid working. ZZP is allowed. Relocation is not possible.\" \/>\n<meta name=\"robots\" content=\"noindex, follow\" \/>\n<meta property=\"og:locale\" content=\"nl_NL\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Security &amp; Vulnerability Assessor (Secure Coding) : A2Z-CM\" \/>\n<meta property=\"og:description\" content=\"36 hours per week Start date: ASAP Duration: 1-year assignment with the possibility of extension&nbsp; Hybrid working. ZZP is allowed. Relocation is not possible.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.a2z-cm.com\/nl\/security-vulnerability-assessor-secure-coding\/\" \/>\n<meta property=\"og:site_name\" content=\"A2Z-CM\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-18T00:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-18T09:00:10+00:00\" \/>\n<meta name=\"author\" content=\"Jobs A2Z-CM\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Geschreven door\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jobs A2Z-CM\" \/>\n\t<meta name=\"twitter:label2\" content=\"Geschatte leestijd\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minuten\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/security-vulnerability-assessor-secure-coding\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/security-vulnerability-assessor-secure-coding\\\/\"},\"author\":{\"name\":\"Jobs A2Z-CM\",\"@id\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/#\\\/schema\\\/person\\\/760541f670abb65c7acb7e1668f71629\"},\"headline\":\"Security &amp; Vulnerability Assessor (Secure Coding)\",\"datePublished\":\"2026-09-18T00:00:00+00:00\",\"dateModified\":\"2026-09-18T09:00:10+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/security-vulnerability-assessor-secure-coding\\\/\"},\"wordCount\":456,\"publisher\":{\"@id\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/#organization\"},\"keywords\":[\"Amstelveen\",\"Security\",\"the Netherlands\"],\"articleSection\":[\"Publications\",\"Security\"],\"inLanguage\":\"nl-NL\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/security-vulnerability-assessor-secure-coding\\\/\",\"url\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/security-vulnerability-assessor-secure-coding\\\/\",\"name\":\"Security &amp; Vulnerability Assessor (Secure Coding) : A2Z-CM\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/#website\"},\"datePublished\":\"2026-09-18T00:00:00+00:00\",\"dateModified\":\"2026-09-18T09:00:10+00:00\",\"description\":\"36 hours per week Start date: ASAP Duration: 1-year assignment with the possibility of extension&nbsp; Hybrid working. ZZP is allowed. Relocation is not possible.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/security-vulnerability-assessor-secure-coding\\\/#breadcrumb\"},\"inLanguage\":\"nl-NL\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/security-vulnerability-assessor-secure-coding\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/security-vulnerability-assessor-secure-coding\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security &amp; Vulnerability Assessor (Secure Coding)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/#website\",\"url\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/\",\"name\":\"A2Z-CM\",\"description\":\"Think Global, Act Local\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"nl-NL\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/#organization\",\"name\":\"A2Z-CM\",\"url\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"nl-NL\",\"@id\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.a2z-cm.com\\\/wp-content\\\/uploads\\\/2022\\\/06\\\/logo-1.svg\",\"contentUrl\":\"https:\\\/\\\/www.a2z-cm.com\\\/wp-content\\\/uploads\\\/2022\\\/06\\\/logo-1.svg\",\"width\":848,\"height\":444,\"caption\":\"A2Z-CM\"},\"image\":{\"@id\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.a2z-cm.com\\\/nl\\\/#\\\/schema\\\/person\\\/760541f670abb65c7acb7e1668f71629\",\"name\":\"Jobs A2Z-CM\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"nl-NL\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=mm&r=g\",\"caption\":\"Jobs A2Z-CM\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Security &amp; Vulnerability Assessor (Secure Coding) : A2Z-CM","description":"36 hours per week Start date: ASAP Duration: 1-year assignment with the possibility of extension&nbsp; Hybrid working. ZZP is allowed. Relocation is not possible.","robots":{"index":"noindex","follow":"follow"},"og_locale":"nl_NL","og_type":"article","og_title":"Security &amp; Vulnerability Assessor (Secure Coding) : A2Z-CM","og_description":"36 hours per week Start date: ASAP Duration: 1-year assignment with the possibility of extension&nbsp; Hybrid working. ZZP is allowed. Relocation is not possible.","og_url":"https:\/\/www.a2z-cm.com\/nl\/security-vulnerability-assessor-secure-coding\/","og_site_name":"A2Z-CM","article_published_time":"2026-09-18T00:00:00+00:00","article_modified_time":"2026-09-18T09:00:10+00:00","author":"Jobs A2Z-CM","twitter_card":"summary_large_image","twitter_misc":{"Geschreven door":"Jobs A2Z-CM","Geschatte leestijd":"2 minuten"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.a2z-cm.com\/nl\/security-vulnerability-assessor-secure-coding\/#article","isPartOf":{"@id":"https:\/\/www.a2z-cm.com\/nl\/security-vulnerability-assessor-secure-coding\/"},"author":{"name":"Jobs A2Z-CM","@id":"https:\/\/www.a2z-cm.com\/nl\/#\/schema\/person\/760541f670abb65c7acb7e1668f71629"},"headline":"Security &amp; Vulnerability Assessor (Secure Coding)","datePublished":"2026-09-18T00:00:00+00:00","dateModified":"2026-09-18T09:00:10+00:00","mainEntityOfPage":{"@id":"https:\/\/www.a2z-cm.com\/nl\/security-vulnerability-assessor-secure-coding\/"},"wordCount":456,"publisher":{"@id":"https:\/\/www.a2z-cm.com\/nl\/#organization"},"keywords":["Amstelveen","Security","the Netherlands"],"articleSection":["Publications","Security"],"inLanguage":"nl-NL"},{"@type":"WebPage","@id":"https:\/\/www.a2z-cm.com\/nl\/security-vulnerability-assessor-secure-coding\/","url":"https:\/\/www.a2z-cm.com\/nl\/security-vulnerability-assessor-secure-coding\/","name":"Security &amp; Vulnerability Assessor (Secure Coding) : A2Z-CM","isPartOf":{"@id":"https:\/\/www.a2z-cm.com\/nl\/#website"},"datePublished":"2026-09-18T00:00:00+00:00","dateModified":"2026-09-18T09:00:10+00:00","description":"36 hours per week Start date: ASAP Duration: 1-year assignment with the possibility of extension&nbsp; Hybrid working. ZZP is allowed. Relocation is not possible.","breadcrumb":{"@id":"https:\/\/www.a2z-cm.com\/nl\/security-vulnerability-assessor-secure-coding\/#breadcrumb"},"inLanguage":"nl-NL","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.a2z-cm.com\/nl\/security-vulnerability-assessor-secure-coding\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.a2z-cm.com\/nl\/security-vulnerability-assessor-secure-coding\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.a2z-cm.com\/nl\/"},{"@type":"ListItem","position":2,"name":"Security &amp; Vulnerability Assessor (Secure Coding)"}]},{"@type":"WebSite","@id":"https:\/\/www.a2z-cm.com\/nl\/#website","url":"https:\/\/www.a2z-cm.com\/nl\/","name":"A2Z-CM","description":"Think Global, Act Local","publisher":{"@id":"https:\/\/www.a2z-cm.com\/nl\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.a2z-cm.com\/nl\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"nl-NL"},{"@type":"Organization","@id":"https:\/\/www.a2z-cm.com\/nl\/#organization","name":"A2Z-CM","url":"https:\/\/www.a2z-cm.com\/nl\/","logo":{"@type":"ImageObject","inLanguage":"nl-NL","@id":"https:\/\/www.a2z-cm.com\/nl\/#\/schema\/logo\/image\/","url":"https:\/\/www.a2z-cm.com\/wp-content\/uploads\/2022\/06\/logo-1.svg","contentUrl":"https:\/\/www.a2z-cm.com\/wp-content\/uploads\/2022\/06\/logo-1.svg","width":848,"height":444,"caption":"A2Z-CM"},"image":{"@id":"https:\/\/www.a2z-cm.com\/nl\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.a2z-cm.com\/nl\/#\/schema\/person\/760541f670abb65c7acb7e1668f71629","name":"Jobs A2Z-CM","image":{"@type":"ImageObject","inLanguage":"nl-NL","@id":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=mm&r=g","caption":"Jobs A2Z-CM"}}]}},"_links":{"self":[{"href":"https:\/\/www.a2z-cm.com\/nl\/wp-json\/wp\/v2\/posts\/12748","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.a2z-cm.com\/nl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.a2z-cm.com\/nl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.a2z-cm.com\/nl\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/www.a2z-cm.com\/nl\/wp-json\/wp\/v2\/comments?post=12748"}],"version-history":[{"count":0,"href":"https:\/\/www.a2z-cm.com\/nl\/wp-json\/wp\/v2\/posts\/12748\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.a2z-cm.com\/nl\/wp-json\/wp\/v2\/media?parent=12748"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.a2z-cm.com\/nl\/wp-json\/wp\/v2\/categories?post=12748"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.a2z-cm.com\/nl\/wp-json\/wp\/v2\/tags?post=12748"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}