Application Security Engineer

Crone Corkill; Greater London; Hybrid; GBP 40,000 - 60,000; Full time

Job summary

Join a dynamic scale-up in West London as an Application Security Engineer, where you will play a pivotal role in enhancing security measures across applications. This position offers the unique opportunity to collaborate with diverse technical teams while also working independently. You will be responsible for monitoring infrastructure, conducting security tests, and implementing automation processes to safeguard the company's applications. With a strong emphasis on a positive company culture and the autonomy to influence security strategies, this role is perfect for someone eager to make a significant impact in a growing organization. If you're passionate about security and ready to take on new challenges, this is the role for you.

Qualifications

• Experience with security architecture from network to API level.
• Knowledge of security testing and incident response.

Responsibilities

• Monitor infrastructure using SIEM, EDR, and Vulnerability tools.
• Respond to threats and implement security processes.

Skills

Splunk

CrowdStrike

Qualys

SAST/DAST

AWS

Scripting and automating tasks

Infrastructure as Code (IaC)

Cloud Security best practices

ISO27001 knowledge

Tools

SIEM tools

EDR tools

Vulnerability tools

Job description

This range is provided by Crone Corkill. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

Full Time | West London | Hybrid (2 in 3 WFH)

Is this the Application Security Engineer role for you?

Crone Corkill are assisting a West London based scale-up as they look to add an Application Security Engineer to the business. Working as part of a diverse business, you’ll be responsible for collaboration across the technical teams, whilst also being capable of working independently. Please note that this JD is a comprehensive list of what you can expect to be involved in, though they don’t expect you to have every single skill mentioned below.

You’ll cover the architecture of their applications from network to API level, use CI/CD pipelines to implement the automation of security processes, respond to identified threats quickly, and assist with security tests as they look to implement mitigation measures.

What will you do as an Application Security Engineer?

• Monitor the infrastructure using their available SIEM, EDR, Vulnerability, DLP and SAST/DAST tools
• Provide sound knowledge on the architecture of their applications from network to API level (emphasis on security)
• Perform security tests, implement mitigation measures, analyse code and ensure the SDLC remains secure
• Respond to threats, vulnerabilities and incidents quickly
• Implement the automation of security processes
• Assist in driving their security strategy by collaborating across teams, liaising with stakeholders and ensuring security is immersed in the company culture

What skills do you need to be an Application Security Engineer?

• Splunk – Also happy with other SIEM tools
• CrowdStrike – Also happy with other EDR tools
• Qualys – Also happy with other Vulnerability tools
• SAST/DAST experience
• AWS ideally
• Scripting and automating tasks – Flexible with languages
• Infrastructure as Code (IaC) mindset – Happy with Terraform, CloudFormation etc
• Best practice for Cloud Security, logging & monitoring, incident response etc
• Knowledge of ISO27001

What’s in it for you?

In return you’ll be joining an intriguing organisation in its relative infancy. Though they’ve been around for several years and operate as a scale-up, they haven’t grown too fast and operate with a good company culture. The foundations for the security team have already been laid, so this gives you a really good opportunity to help push them forward with lots of autonomy in the role for you.

Seniority level

Mid-Senior level

Employment type

Full-time

Job function

Information Technology