App Sec Engineer — Hybrid, Secure SDLC & PenTesting

Barclay Simpson; Greater London; Hybrid; GBP 51,000 - 85,000; Full time

Job summary

Barclay Simpson is seeking an experienced Application Security Engineer to join a leading UK financial services organisation in London, Manchester or Glasgow.

You will work with engineering and DevSecOps teams focusing on secure code reviews, SAST/DAST, vulnerability assessments and embedding security in the CI/CD lifecycle. Some pre-release manual PenTesting and threat modelling are also expected.

Qualifications

• Strong application security experience including secure code reviews and threat modelling.
• Experience with OWASP Top 10 and Veracode or similar scanning tools.
• Familiarity with DevSecOps/CI/CD and cloud security (Azure and/or AWS).

Responsibilities

• Perform secure code reviews and SAST/DAST scans throughout CI/CD pipelines.
• Conduct vulnerability assessments and embed security into development processes.
• Carry out pre-release manual penetration testing and threat modelling.

Skills

Application security

OWASP Top 10

DevSecOps/CI-CD

Cloud security (Azure/AWS)

SAST/DAST

Vulnerability assessment

PenTesting (manual)

Kali Linux

Tools

Veracode

Kali Linux

Job description

Barclay Simpson is seeking an experienced Application Security Engineer to join a leading UK financial services organisation in London, Manchester or Glasgow.

You will work with engineering and DevSecOps teams focusing on secure code reviews, SAST/DAST, vulnerability assessments and embedding security in the CI/CD lifecycle. Some pre-release manual PenTesting and threat modelling are also expected.