Application Security Engineering Lead

Barclays; Glasgow; Hybrid; GBP 70,000 - 90,000; Full time

Job summary

A leading bank in the UK is looking for an Application Security Engineering Lead to design and deliver tools for secure software development. Responsibilities include implementing security protocols, managing sensitive information, and collaborating across teams to align security objectives with business goals. The ideal candidate should have experience with SAST, DAST, programming, and cloud services. Demonstrating the bank's values is essential for the role.

Qualifications

• Strong knowledge of securing software systems and overall software security landscape.
• Ability to develop protocols and software applications that protect sensitive data.
• Experience in audits and vulnerability assessments within software infrastructures.

Responsibilities

• Design and deliver secure software tools for developers.
• Implement and maintain security policies and protocols.
• Collaborate with teams to align cryptographic solutions with business objectives.
• Manage and protect sensitive information and secrets.

Skills

Understanding of CVEs and CWEs

Experience with SAST, SCA, DAST

Programming language (Java, Go)

Familiarity with cloud providers (AWS, GCP, Azure)

REST API design

HTTP Authentication

Linux scripting/automation

Experience with CI/CD

GraphQL knowledge

Familiarity with authentication systems (OAUTH)

Job description

Join © Barclays  Here, your work as an Application Security Engineering Lead will design and deliver tools that help developers build secure software from the start. Your work will enhance security across the bank, protecting critical systems and sensitive information.

TobesuccessfulasanApplicationSecurityEngineeringLead

• The software security landscape: CVEs, CWEs, common software vulnerability types.
• SAST, SCA, and DAST, including the strengths and weaknesses of each.
• At least one programming language (e.g. Java, Go).
• At least one major cloud provider (e.g. AWS, GCP, Azure).
• REST API design.
• HTTP Authentication.
• Linux at the terminal, including scripting and automation (e.g. shell, Python).

Someotherhighlyvaluedskillsmayinclude

• Experience with CI/CD.
• GraphQL.
• Familiarity with authentication systems (e.g. OAUTH).

Youmaybeassessedonthekeycriticalskillsrelevantforsuccessinrole,suchasriskandcontrols,changeandtransformation,businessacumenstrategicthinkinganddigitalandtechnology,aswellasjob-specifictechnicalskills.

ThisroleisbasedinKnutsford/Glasgow.

Purpose of the role

To develop, implement and maintain solutions that support the safeguarding of the banks systems and sensitive information.

Accountabilities

• Provision of subject matter expertise on security systems and engineering patterns.
• Development and implementation of protocols, algorithms, and software applications to protect sensitive data and systems.
• Management and protection of secrets, ensuring that they are securely generated, stored, and used.
• Execution of audits to monitor, identify and assess vulnerabilities in the banks infrastructure/software and support the response to potential security breaches.
• Identification of advancements in to support the innovation and adoption of new cryptographic technologies and techniques.
• Collaboration across the bank, including developers and security teams, to ensure that cryptographic solutions align with business objectives, security policies and regulatory requirements.
• Development/ Implementation and maintenance of Identity and Access Management solutions and systems.

Vice President Expectations

• To contribute or set strategy, drive requirements and make recommendations for change. Plan resources, budgets, and policies; manage and maintain policies/ processes; deliver continuous improvements and …
• If managing a team, they define jobs... etc.

All colleagues will be expected to demonstrate the Barclays Values of Respect, Integrity, Service, Excellence and Stewardship – our moral compass, helping us do what we believe is right. They will also be expected to demonstrate the Barclays Mindset – to Empower, Challenge and Drive – the operating manual for how we behave.