Application Security Specialist

JR United Kingdom; Norwich; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A leading company seeks an experienced Application Security Specialist for a 6-month hybrid contract in Norwich. The ideal candidate will have strong security and development experience, particularly in API security and risk reporting, while navigating technical challenges and collaborating with key stakeholders.

Qualifications

• Experienced Application Security Specialist sought for a hybrid contract.
• Ability to translate technical risks into business language is crucial.
• Experience in large-scale enterprise environments is a plus.

Responsibilities

• Join on a 6-month initial contract to improve application security.
• Review APIs for vulnerabilities and track threats with SIEM tools.
• Collaborate with stakeholders to communicate security risks.

Skills

Security and Development background

Deep knowledge of OWASP API Top 10

Review Swagger/Open API specs

Fallback controls (WAF's, API gateways)

Using SIEM/logging tools for API threats

Familiarity with NIST, OWASP SAMM

Producing risk dashboards/reports

Translating technical risks to business language

Experience in enterprise environments

Job description

Social network you want to login/join with:

Application Security Specialist, norwich

col-narrow-left

Client:

Korn Ferry

Location:

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

1

Posted:

31.05.2025

Expiry Date:

15.07.2025

col-wide

Job Description:

Application Security Specialist

Our client is looking to hire an experienced Application Security Specialist to join them on a 6-month initial contract, to work on a hybrid (London, remote), inside IR35 model.

The pay rate for this role will be circa £650 per day, inside IR35

Key Skills Required:

• Strong Security and Development background, in SDLC-focused roles
• Deep knowledge of OWASP API Top 10
• Able to review Swagger/Open API specs for vulnerabilities
• Familiar with fallback controls such as WAF's, API gateways
• Experience using SIEM/logging tools to track API threats
• Familiarity with NIST, OWASP SAMM, or internal security frameworks
• Experience producing risk dashboards/reports for API's
• Able to translate technical risks into business language, collaborating with key stakeholders
• Experience in large-scale, enterprise environments is a big plus

If interested in this role, please apply today : )