Application Security Lead

Canon; Uxbridge; On-site; GBP 70,000 - 90,000; Full time

Job summary

An international tech company in Uxbridge is seeking an experienced Application Security Lead to enhance the security of projects and applications. You will conduct security reviews, support teams with security knowledge, and guide initiatives according to industry standards. Ideal candidates possess experience in security assessments and knowledge of cloud platforms. This role offers opportunities for professional development in a collaborative environment.

Benefits

Professional development support

Inclusive and equitable culture

Commitment to sustainability

Qualifications

• Significant working experience in a Security or IT department.
• Experience in performing security assessments and design reviews.
• In-depth security knowledge of computer networks and cloud platforms.

Responsibilities

• Work closely with business and IT stakeholders.
• Conduct security architecture and design reviews.
• Support project and development teams with security knowledge.

Skills

Security assessments

Security design reviews

Cloud platforms (Azure, AWS)

Stakeholder management

Secure software development

Communication skills

Tools

Pentesting tools

Job description

Social network you want to login/join with:

We are looking for two strong Application Security Leads to strengthen our Canon EMEA Information Security Department (EISD). These roles will be responsible for ensuring that our projects and applications are held to a high standard of security, by performing security reviews and assessments, providing education and guidance for the implementation of security controls, and by being a security thought leader for our IT initiatives.

What we give

With Canon, you'll get the support and encouragement you need to grow, from people who share your ambition. We'll invest in your professional development to help you learn and progress in your role with us. You'll find leaders who give you the freedom to explore new things and a team where knowledge is shared openly.

At Canon we have a clear vision: to be committed to creating a more inclusive and equitable culture where employees are valued and can thrive personally and professionally.

Canon also has a strong commitment to sustainability, encompassed by our Kyosei philosophy of living and working together for the common good, focused on reducing our environmental impact and creating opportunities to make positive social contribution.

As anApplication Security Lead you will:

• Work closely with the business and IT stakeholders, and in close cooperation with all the functions in the Canon EMEA Information Security Department (EISD).
• Act as the security representative within project streams for new and upcoming initiatives.
• Conduct security architecture and design reviews.
• Translate security policies into security requirements for new and existing projects.
• Support project and development teams with relevant security knowledge.
• Assist with the implementation of security design principles.
• Guide development and project teams in the remediation of identified security deficiencies.
• Support the planning and execution of application pentests, and the follow-up of remediation measures.
• Recommend and assist in the implementation of security controls in the SDLC of supported applications.

What we ask

We are looking for the following in our future colleagues:

• Significant working experience in a technical capacity in a Security or IT department, preferably across multiple security domains.
• Demonstrable experience in performing security assessments and security design reviews.
• In-depth security knowledge of computer networks, infrastructure, and cloud platforms, mainly Azure and AWS.
• Experience in software development and Application Security.
• Knowledge and expertise in secure software development lifecycle (SSDLC) is highly desirable.
• Ability to understand, follow up and progress mitigation activities for security auditing reports, penetration testing reports and/or configuration reviews.
• Good stakeholder management and communication skills.
• Experience working in large international organizations and in handling large enterprise projects is a plus.
• Skilled at working independently and collaboratively in a cross-functional environment.
• A continuous learning mindset, to stay up to date with the latest developments in the industry.
• Degrees and certifications are welcome, but are not required.

Knowledge in one or more of the following are highly desirable:

• Secure Architecture and Design principles
• Pentesting tools and techniques, and experience in performing pentests
• Secure coding for common languages and platforms
• Security frameworks, such as OWASP, NIST CSF, CIS etc.
• Understanding of EU and international compliance requirements, such as GDPR, PCI-DSS, NIS2 etc.