Application Security Specialist

JR United Kingdom; Cardiff; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A leading client in Cardiff seeks an experienced Application Security Specialist for a 6-month contract role, focused on ensuring security throughout the development lifecycle. The position involves hybrid working arrangements and requires expertise in API security and risk management. The ideal candidate will have a strong background in security practices and be adept at identifying and mitigating risks in APIs.

Qualifications

• Experienced Application Security Specialist.
• Strong expertise in security assessments and SDLC practices.
• Proficient in API security frameworks and risk management.

Responsibilities

• Conduct security assessments across APIs and applications.
• Review and identify vulnerabilities in API specifications.
• Collaborate with stakeholders to convey technical risks.

Skills

Security and Development background

Knowledge of OWASP API Top 10

Reviewing Swagger/Open API specs

Familiarity with fallback controls (WAF, API gateways)

Experience using SIEM/logging tools

Understanding of NIST, OWASP SAMM

Ability to produce risk dashboards/reports

Translating technical risks to business language

Experience in enterprise environments

Job description

Social network you want to login/join with:

Application Security Specialist, cardiff

col-narrow-left

Client:

Korn Ferry

Location:

cardiff, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

1

Posted:

31.05.2025

Expiry Date:

15.07.2025

col-wide

Job Description:

Application Security Specialist

Our client is looking to hire an experienced Application Security Specialist to join them on a 6-month initial contract, to work on a hybrid (London, remote), inside IR35 model.

The pay rate for this role will be circa £650 per day, inside IR35

Key Skills Required:

• Strong Security and Development background, in SDLC-focused roles
• Deep knowledge of OWASP API Top 10
• Able to review Swagger/Open API specs for vulnerabilities
• Familiar with fallback controls such as WAF's, API gateways
• Experience using SIEM/logging tools to track API threats
• Familiarity with NIST, OWASP SAMM, or internal security frameworks
• Experience producing risk dashboards/reports for API's
• Able to translate technical risks into business language, collaborating with key stakeholders
• Experience in large-scale, enterprise environments is a big plus

If interested in this role, please apply today : )