Application Security Engineer

Spencer Rose Ltd; Rowberrow; On-site; GBP 76,000 - 90,000; Full time

Job summary

A financial services organization in the UK seeks an Application Security Engineer to enhance their security posture through active engineering and risk management. The ideal candidate will automate security processes, provide design input, and work on threat modeling and penetration tests to secure new technologies. Essential skills include proficiency in Python and relevant security certifications. This role offers competitive compensation and opportunities for progression within a major technology transformation initiative.

Benefits

Great benefits

Qualifications

• Experience overseeing security aspects of technology projects.
• Certifications in security relevant to the position.
• Strong understanding of security and software development.

Responsibilities

• Provide security input into solution design.
• Automate security tooling for repository maintenance.
• Ensure security requirements are met in new technologies.
• Conduct threat modeling and penetration testing.
• Support teams with security advice.
• Lead hands-on security engineering as required.

Skills

Experience in a similar role

Proficiency with Python

Proficiency with Jenkins

Proficiency with Powershell

Proficiency with Bash

Proficiency with GitHub Actions

Education

CISSP Certification

SANS Certification

Cre/CHECK Certification

Job description

Application Security Engineer

Bristol or Edinburgh

£90,000 + great benefits

An impressive financial services business is looking to hire an Application Security Engineer to support this team with the risk and remediation activities. This business is going through a big technology transformation programme that is estimated to take 3 -5 years. The successful Application Security Engineer will be part of this journey and have great technical exposure and the ability to rapidly progress. Working closely in one of transformation projects, the successful Application Security Engineer will work closely with the wider security and technology teams to define the strategy and roadmap of technology changes moving forward.

Duties and Responsibilities

• Provide security input into solution design to ensure that security principles are incorporated at both the platform and software level
• Automate tooling to run security fixes over a variety of repo's
• Ensure that security requirement input is provided across the programme to ensure that the new technology is secure by design
• Support the teams to interpret security requirements of the project
• Conduct threat modelling and pen testing to identify threats and establish controls
• Support wider teams with security advice and guidance in both a verbal and written format
• Lead delivery of hands-on security engineering solutions when needed

Your Background

• Experience in a similar role, in both responsibility and scale
• Proficiency with one of the following: Python, Jenkins, Powershell, Bash, GitHub Actions
• Relevant professional certifications for example:
  • CISSP
  • SANS
  • Cre/CHECK
  • Strong understanding of shift left
  • Proven experience with of working with development teams on security related topics
  • Either hands on secure software development or applications security testing
  • Likely come from a pen testing, SRE, or Software Development Background

We invite individuals from underrepresented groups to apply for any of our roles and are committed to supporting accessibility needs.