Application Security Engineer

Spencer Rose Ltd; Scotland; On-site; GBP 80,000 - 100,000; Full time

Job summary

A notable financial services company in the United Kingdom is seeking an Application Security Engineer to provide crucial security guidance during significant technology transformations. The candidate will work on security solutions and collaborate with diverse technical teams while enhancing security processes. The ideal candidate should have relevant experience and skills in security engineering, coding, and risk assessment, fostering a dynamic and rapidly advancing career environment.

Benefits

Great benefits

Qualifications

• Experience with security input into solution design.
• Proven experience with delivery of security engineering solutions.
• Experience with security testing and threat modelling.

Responsibilities

• Provide security input into solution design.
• Automate tooling to run security fixes.
• Conduct threat modelling and pen testing.

Skills

Experience in a similar role

Proficiency with Python

Strong understanding of shift left

Experience with Jenkins

Hands on secure software development

Working with development teams on security

Education

CISSP

SANS

Crest/CHECK

Tools

GitHub Actions

Bash

Powershell

Job description

Application Security Engineer

Bristol – 3 days a week on site

GBP90,000 + great benefits

An impressive financial services business is looking to hire an Application Security Engineer to support this team with the risk and remediation activities. This business is going through a big technology transformation programme that is estimated to take 3 –5 years. The successful Application Security Engineer will be part of this journey and have great technical exposure and the ability to rapidly progress. Working closely in one of transformation projects, the successful Application Security Engineer will work closely with the wider security and technology teams to define the strategy and roadmap of technology changes moving forward.

Duties and Responsibilities

• Provide security input into solution design to ensure that security principles are incorporated at both the platform and software level
• Automate tooling to run security fixes over a variety of repo's
• Ensure that security requirement input is provided across the programme to ensure that the new technology is secure by design
• Support the teams to interpret security requirements of the project
• Conduct threat modelling and pen testing to identify threats and establish controls
• Support wider teams with security advice and guidance in both a verbal and written format
• Lead delivery of hands–on security engineering solutions when needed

Application Security Engineer – Your Background

The ideal Application Security Engineer will have:

• Experience in a similar role, in both responsibility and scale
• Proficiency with one of the following: Python, Jenkins, Powershell, Bash, GitHub Actions
• Relevant professional certifications for example:
  • CISSP
  • SANS
  • Crest/CHECK
  • Strong understanding of shift left
  • Proven experience with of working with development teams on security related topics
  • Either hands on secure software development or applications security testing
  • Likely come from a pen testing, SRE, or Software Development Background

We invite individuals from underrepresented groups to apply for any of our roles and are committed to supporting accessibility needs.