Application Security Engineer

NatWest Group; London; On-site; GBP 65,000 - 85,000; Full time

Job summary

A leading financial institution in London is seeking an Application Security Engineer to enhance the security of their banking applications. The role involves collaborating with engineering teams, managing application vulnerabilities, and implementing security initiatives. Candidates should have strong application security knowledge and communication skills to support secure solutions in an agile environment.

Qualifications

• Excellent knowledge of application security and working with engineering teams.
• Experience delivering and reporting on application vulnerability management.
• Knowledge of common industry cyber security frameworks, standards and methodologies.

Responsibilities

• Supporting Product and Engineering teams in securely designing and developing solutions.
• Performing threat modelling and implementing automated security testing.
• Promoting and implementing new security initiatives and tools.

Skills

Application security

Communication skills

DevOps automation

Job description

Overview

Join us as an Application Security Engineer

• This is a unique opportunity for someone with application security experience to join us at NatWest Boxed
• We are building solutions to provide mobile and web banking services and Banking as a Service (embedded finance) to enable companies to provide banking services to their end customers
• Gain valuable exposure and make a real impact with your workas you keep our applications and platforms safe for our business and customers

The responsibilities

As an Application Security Engineer, you’ll be supporting our Product and Engineering teams in securely designing and developing solutions and continuously improving the visibility of our risks to enable our engineering teams to prioritise and fix issues in line with our vulnerability policy

You’ll also be:

• Performing threat modelling
• Implementing automated security testing as part of our pipeline
• Supporting reporting of our application risk posture to stakeholders
• Supporting and work with architects and the security team, exchanging knowledge and upskilling each other
• Promoting and implementing new security initiatives, trial new security tools

The skills you\'ll need

To join us in this role, you’ll need excellent knowledge of application security and working with engineering teams to deliver secure solutions. As well as experience implementing or working with security champions networks.

Along with this, you’ll need:

• Experience delivering and reporting on application vulnerability management
• Great communication and influencing skills
• Knowledge and experience of automating and API calls for DevOps
• Understanding and knowledge of common industry cyber security frameworks, standards and methodologies, including; OWASP, MITRE ATT&CK and NIST