{"id":469340,"url":"https://alion.io/job/fareharbor-application-security-engineer","title":"Application Security Engineer","company":{"id":180988,"name":"FareHarbor","domain":"fareharbor.com","url":"https://alion.io/company/fareharbor","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":88,"open_postings":6,"ghost_share":0,"stale_share":0.5,"repost_share":0,"time_to_fill_p50_days":35,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Amsterdam, Netherlands"],"countries":["NL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":66000,"max_usd":134000,"period":"year","method":"role_country_seniority_unknown","sample_n":82},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"AWS WAF","optional":false},{"name":"CI/CD","optional":false},{"name":"Elastic SIEM","optional":false},{"name":"GitLab CI","optional":false},{"name":"Go","optional":false},{"name":"IAM","optional":false},{"name":"Java","optional":false},{"name":"Kubernetes","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Cursor","optional":true},{"name":"GDPR","optional":true},{"name":"Incident Management","optional":true},{"name":"PCI DSS","optional":true},{"name":"SOC 2","optional":true},{"name":"Terraform","optional":true},{"name":"Tines","optional":true}],"status":"live","first_seen_at":"2026-07-29T01:35:50Z","employer_posted_date":"2026-09-16","last_verified_at":"2026-10-16T13:09:29Z","board_verified":true,"closed_at":null,"days_open":79,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":79},"description":"About FareHarbor\nAt FareHarbor, our mission is to make experiences better for everyone. Founded in 2013 in Hawaii and acquired by Booking Holdings in 2018, FareHarbor creates powerful tools that enable our clients (think boat rentals, museums, food tours, events and more!) to operate and grow.\nWith over 20,000 clients across 90+ countries-we’re the largest in our industry and shaping the future of travel, together.\nOur team is an ‘Ohana of 700+ people around the world. We’re passionate about pioneering an industry, embracing challenges with open arms, and delivering value to the experiences industry.\nFareHarbor Core Values:\nThink Client First\nWe Are One ‘Ohana\nBe Curious and Learn\nOwn It.\nAct With Integrity\nEmbrace the Challenge\nWhy FareHarbor?\nFounding FareHarbor required unwavering passion. Turning a start-up into the world’s leading and largest reservation software for tours, activities, and attractions required relentless dedication and vision. To date, we’ve helped over 20,000 global businesses operate successfully and are proud to have played a role in enabling business owners to live their dreams.\nAnd since day one, we’ve known that our real success lies in our people-the Ohana.\nWith each new feature launched and new client onboarded, there is a team of incredible people behind the scenes who are full of dedication, passion, energy, and the will to succeed. We encourage everyone to bring their whole selves to work-to believe in their abilities, to freely express their creativity, and to contribute with their own uniqueness by wearing their true colors. We take care of one another and always prioritize health and wellbeing. We give our people the space and trust to learn, to try, to succeed, to collaborate, to think outside of the box, to make mistakes, and even to fail. And then we come together to try again.\nFrom the minute you join, you have a voice. You find your space. You make an impact. We celebrate our victories, shout our successes, and are always eager to tackle new challenges. And we can’t wait to see all that’s to come.\nAbout the Role\nFareHarbor is looking for a full time Application Security Engineer to join our Security Engineering team in Amsterdam. This role will primarily focus on application security and secure SDLC initiatives, while also supporting security monitoring efforts. We are looking for someone who can work closely with our Senior Application Security Engineer on application security reviews, secure development practices, CI/CD security controls, application vulnerability remediation, and broader security engineering initiatives. The ideal candidate is comfortable operating across multiple areas of security, with strong application security expertise and the ability to contribute to automation, detection engineering, and incident response.\nWhat you will do:\nWork closely with product, platform, and security teams to ensure security is an integral part of our SDLC\nPerform application security reviews, code reviews, threat modeling, and design reviews for new and existing features, promote application security practices across engineering teams\nIdentify, assess, and help remediate vulnerabilities in applications, APIs, services, and GitLab CI/CD pipelines by implementing and maintaining application security controls such as security policies, SAST, DAST, SCA, container scanning, and other CI/CD security controls\nSupport assessment and remediation such as for penetration test findings, bug bounty findings, vulnerability scan results, internal or external audit by providing technical input, documentation, and evidence\nWrite and maintain code and automation to support application security workflows, security tooling, vulnerability management, detection, and CI/CD security controls.\nWork with engineering teams to provide guidance on secure coding practices, application architecture, authentication, authorization, API security, secrets management, and secure deployment patterns\nSupport security initiatives, such as IAM, AWS WAF, Help fine-tune security monitoring and detection capabilities, including Elastic SIEM rules, WAF policies, alerting logic, logging improvements, and security automation\nParticipate in security alert triage, investigation, and incident response activities when needed\nParticipate in the security on-call rotation\nRequired Skills and Experience:\nTechnical skills:\nSenior engineer with strong experience in application security, secure SDLC, strong technical knowledge of web/API security, common vulnerabilities, and practical mitigation strategies for OWASP Top 10.\nProven experience performing application security reviews, including code reviews, design reviews, and threat modeling, as well as supporting the remediation of security findings from penetration tests, vulnerability scans, and security audits.\nExperience implementing security controls in GitLab CI/CD pipeline, such as SAST, DAST, SCA, secret scanning, IaC scanning, dependency scanning etc.\nStrong hands-on programming experience in Python or another high-level language such as Go or Java, with the ability to independently write, review, debug, and maintain code\nGood understanding of AWS security concepts, including IAM, WAF, Kubernetes, containers, and infrastructure as code\nExperience with security monitoring, alert tuning, SIEM use cases, logging, detection engineering, or WAF rule tuning\nPentesting experience is a plus\nAbility to assess risk, prioritize vulnerabilities, and balance security requirements with business needs and engineering realities\nFamiliarity with security and compliance frameworks such as NIST, PCI DSS, GDPR, SOC 2, SOX, or similar\nGood understanding of incident response, security investigations, and technical incident management\nExperience with API security, microservices security, and distributed application architectures\nExperience with AI-assisted security automation for AppSec triage, vulnerability assessment, detection tuning, and security monitoring workflows using tools such as Cursor, Tines, Elastic, or similar.\nSoft skills:\nStrong communication skills, able to explain technical security risks clearly to both technical and non-technical stakeholders\nAble to work effectively with product, engineering, platform, infrastructure, and security teams\nProactive attitude, always on the look-out for improving your and our way of working\nStrong problem-solving skills and ability to analyze complex systems and make decisions based on risk, data, and best practices\nStrong relationship building skills across diverse cross-functional teams\nComfortable operating independently and taking ownership of security initiatives from discovery through implementation\nAble to provide practical security guidance that enables teams to move quickly and securely\nNice to Haves:\nSecurity certifications such as OSCP, OSWE, OSWA, GWAPT, GWEB, CISSP, CCSP, Security+, AWS Certified Security Specialty, or similar\nExperience with bug bounty programs and coordinating vulnerability remediation with third party\nExperience with Terraform, infrastructure as code, configuration management, and policy-as-code frameworks\nExperience building internal security tooling or developer-facing security automation\nContributions to the security community through research, blog posts, conference talks, open-source tools, or responsible disclosures\nThis role is available to candidates located in the Netherlands and requires ability to work in a hybrid setup with in-office presence..\nBenefits \nGlobal leave benefit 22 weeks paid parental leave \n2 weeks paid grandparent leave \nExtended care and bereavement leave\n\nLife insurance policy \nPension Plan\nCentral Amsterdam Location\nDiscount CZ insurance\nWorking in a multicultural environment - 45 different nationalities \nCommuting allowance for public transport & subsidized lunch\nWellness benefits (Headspace subscription & wellness webinars) \nHybrid friendly\nWork-from-home assistance\nEducational OpportunitiesIndividual skill development & growth programming\n\nSocial hours & events and team-building \n26 vacation days per year\nFareHarbor is committed to creating a diverse environment, and we are an equal opportunity employer. We do not discriminate on the basis of race, color, religion, gender, gender identity, sexual orientation, national origin, disability, age, or veteran status. We welcome talent that can offer us new insights and perspectives on challenges that we face, and we take measures to eliminate unconscious bias throughout the interview and hiring process. In tandem, we work to cultivate an inclusive culture in which all of our employees can be their authentic selves.\nTo learn more about how we use your information, see our Privacy Statement for Applicants. By submitting your application, you confirm that you understand and agree that your information will be processed in accordance with our Privacy Statement for Applicants.\nAny offer of work (e.g. employment, assignment) will be subjected to the successful completion of pre-employment screening.","description_format":"text","description_chars":9047,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Life insurance","Parental leave"],"hiring_locations":[{"name":"Netherlands","iso":"NL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Tour Operators","Scheduling & Booking Software"],"lifecycle":[{"event":"open","at":"2026-09-06T13:02:18Z"},{"event":"close","at":"2026-09-08T13:32:42Z"},{"event":"reopen","at":"2026-09-16T08:38:46Z"}],"visa":[],"liveness":{"score":12,"band":"cold","label":"Long shot","p_open":1,"p_active":0.439,"p_room":0.28,"age_days":79,"expected_fill_days":35,"reasons":["conf:1","win:tail","crowd:"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/fareharbor-application-security-engineer","json_url":"https://alion.io/job/fareharbor-application-security-engineer.json","meta":{"generated_at":"2026-10-16T15:48:49Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":60,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":180988},"rest":"https://alion.io/mcp/rest/get_company?id=180988"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffareharbor-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffareharbor-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffareharbor-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/fareharbor-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffareharbor-application-security-engineer"}]}