Security Test Engineer

Your Challenge as Security Test Engineer
Are you ready to help strengthen the security and quality of software solutions that support governments and societies around the world? Blyce is looking for a Security Test Engineer to join our Product Development and testing organization, working closely with the Security team and development stakeholders. This is a full-time role, preferably based in Medellín, while we are also open to strong candidates in Curaçao or, where needed, the Netherlands.

Strong English communication skills are required.

In this role, you will play a key part in identifying, validating, and helping resolve application security risks across web applications, APIs, platforms, enhancements, and software solutions. You will test from a security perspective, document findings clearly, follow up on remediation, and support the move toward stronger, non-negotiable security gates in the software delivery process.

Every day, you will combine analytical thinking, hands‑on security testing, stakeholder collaboration, and practical problem solving to help Blyce deliver secure and reliable products. You will work in a cross‑functional, international environment where security is becoming more deeply embedded into development and testing processes.

Key Responsibilities

Security Testing & Vulnerability Assessment

• Perform hands‑on security testing for web applications, APIs, portals, platforms, software solutions, and product enhancements.

• Identify and validate vulnerabilities related to OWASP risks, authentication, authorization, APIs, XSS, SQL injection, blind SQL injection, exposed hashes, security details, and related application security topics.

• Use tools such as Burp Suite, Nmap, vulnerability scanners, and other security‑testing utilities to support testing activities.

• Manually validate findings, distinguish genuine vulnerabilities from false positives, and assess the business impact of security risks.

• Apply knowledge of security‑testing methodologies and standards, including OWASP Top 10, the OWASP Testing Guide, and PTES.

Reporting, Follow‑up & Remediation

• Prepare clear and accurate security test reports with supporting evidence, risk ratings, and practical remediation recommendations.

• Share findings with requesters and relevant stakeholders in a clear, constructive, and actionable way.

• Follow up on remediation actions, review change logs, retest fixes, and confirm whether identified gaps have been closed.

• Escalate risks or unresolved findings when needed and help drive security findings to closure across teams.

Security in the Development Lifecycle

• Support the implementation and improvement of automated security testing within CI/CD pipelines.

• Help embed security checks, static or security scans, and security gates into the software delivery process.

• Collaborate with Product Development, testing teams, and Security stakeholders to strengthen application security practices.

• Contribute to a culture where security is addressed proactively, practically, and consistently throughout development and release cycles.

Stakeholder Collaboration & Ownership

• Review security test requests submitted through internal templates and Jira boards, including scope, links, and relevant context.

• Communicate clearly with technical and non‑technical stakeholders about risks, findings, impact, and possible solutions.

• Take ownership of assigned security testing activities from intake through reporting, follow‑up, retesting, and closure.

• Act with professional integrity and handle confidential information responsibly.

We Offer an Attractive Benefits Package Including:

• A competitive gross monthly salary between €4.000- and €5.325,- depending on experience (based on full‑time employment in the Netherlands);

• 28 vacation days, with the option to buy or sell 8 additional days each year;

• 8.33% vacation pay;

• A gross variable compensation equivalent to an extra month’s salary per year, paid out per month;

• A gross fixed expense allowance of €300,- per month;

• An annual reward, linked to company results;

• Full coverage of your basic health insurance, plus a strong pension plan via a.s.r.;

• A hybrid working policy that supports flexibility and…