Application Security Engineer

Spencer Rose Ltd; Bridgwater; Hybrid; GBP 76,000 - 90,000; Full time

Job summary

A leading financial services business is seeking an Application Security Engineer to support risk and remediation activities. This role involves contributing to a major technology transformation over 3-5 years, with technical exposure and potential for rapid progress. The ideal candidate has experience in similar roles, proficiency in relevant programming tools, and relevant certifications. Responsibilities include providing security input in design, automating security fixes, and conducting threat modeling.

Benefits

Great benefits

Responsibilities

• Provide security input into solution design.
• Automate tooling for security fixes.
• Ensure technology is secure by design.
• Support interpretation of security requirements.
• Conduct threat modeling and pen testing.
• Deliver hands-on security engineering solutions.

Skills

Experience in a similar role

Proficiency with Python, Jenkins, Powershell, Bash, GitHub Actions

Strong understanding of shift left

Experience with development teams on security-related topics

Hands-on secure software development or applications security testing

Background in pen testing, SRE, or Software Development

Education

Relevant professional certifications (CISSP, SANS, Crest/CHECK)

Job description

Application Security Engineer

Bristol - 3 days a week on site

£90,000 + great benefits

An impressive financial services business is looking to hire an Application Security Engineer to support this team with the risk and remediation activities. This business is going through a big technology transformation programme that is estimated to take 3 -5 years. The successful Application Security Engineer will be part of this journey and have great technical exposure and the ability to rapidly progress. Working closely in one of transformation projects, the successful Application Security Engineer will work closely with the wider security and technology teams to define the strategy and roadmap of technology changes moving forward.

Application Security Engineer – Your Background

The ideal Application Security Engineer will have:

• Experience in a similar role, in both responsibility and scale
• Proficiency with one of the following: Python, Jenkins, Powershell, Bash, GitHub Actions
• Relevant professional certifications for example:
  • CISSP
  • SANS
  • Crest/CHECK
• Strong understanding of shift left
• Proven experience with of working with development teams on security related topics
• Either hands on secure software development or applications security testing
• Likely come from a pen testing, SRE, or Software Development Background

We invite individuals from underrepresented groups to apply for any of our roles and are committed to supporting accessibility needs.

Duties and Responsibilities

The successful Application Security Engineer will:

• Provide security input into solution design to ensure that security principles are incorporated at both the platform and software level
• Automate tooling to run security fixes over a variety of repo's
• Ensure that security requirement input is provided across the programme to ensure that the new technology is secure by design
• Support the teams to interpret security requirements of the project
• Conduct threat modelling and pen testing to identify threats and establish controls
• Support wider teams with security advice and guidance in both a verbal and written format
• Lead delivery of hands-on security engineering solutions when needed

We invite individuals from underrepresented groups to apply for any of our roles and are committed to supporting accessibility needs.