Application Security Engineer — Hybrid UK, CI/CD & PenTest

Cyber Security training courses; Greater London; Hybrid; GBP 77,000 - 94,000; Full time

Job summary

We're working with a leading UK financial services organisation looking for an experienced Application Security Engineer to join its security function. This role focuses on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle.

You will also perform pre-release manual PenTesting and threat modelling. You need strong application security experience, including OWASP Top 10, Veracode or similar scanning tools, and cloud security across Azure

Qualifications

• Experience in application security including OWASP Top 10.
• Experience with scanning tools (Veracode or similar).
• Experience with DevSecOps/CI/CD and cloud security (Azure and/or AWS).
• Kali Linux experience and some manual PenTesting skills.

Responsibilities

• Perform secure code reviews and SAST/DAST.
• Conduct vulnerability assessments.
• Embed security throughout the CI/CD lifecycle.
• Carry out pre-release manual PenTesting and threat modelling.

Skills

Application security

Secure code reviews

SAST/DAST

Vulnerability assessments

Threat modelling

DevSecOps/CI/CD

Kali Linux

Manual PenTesting

Cloud security

Collaboration with security teams

Tools

Veracode

Job description

We're working with a leading UK financial services organisation looking for an experienced Application Security Engineer to join its security function. This role focuses on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle.

You will also perform pre-release manual PenTesting and threat modelling. You need strong application security experience, including OWASP Top 10, Veracode or similar scanning tools, and cloud security across Azure