Application Security Specialist (Architecture)

Jagex; Cambridge; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

A leading game development company is seeking an experienced Application Security Specialist to join their Cyber team in Cambridge. This hybrid role involves enhancing application security architecture, managing risks, and aligning with development teams to ensure security best practices are implemented. Candidates should have extensive experience in software engineering and application security along with strong communication skills. The company offers comprehensive benefits, including private healthcare and flexible working arrangements, fostering an inclusive and innovative work environment.

Benefits

Private Healthcare, including Dental Plan

Minimum 6% Pension contributions

Employee Assistance Programme & onsite Counselling

Discretionary annual performance bonus

Flexible working hours

25 days annual leave + Bank holidays & the option to buy/sell holidays

Qualifications

• At least 3 years of experience in software engineering.
• At least 2 years of experience in application security.
• In-depth knowledge of application security vulnerabilities, testing techniques, and the OWASP framework.

Responsibilities

• Provide guidance on security best practices and compliance and undertake security testing.
• Identify Application security risks and requirements for new projects and system developments.
• Collaborate with architecture and development teams to review design and code for security vulnerabilities.

Skills

Application Security

Risk Management

Secure Development Lifecycle

Communication Skills

Job description

We are looking for an experienced Application security specialist to join our Cyber team with a hyper focus on supporting our application security architecture and risk management programme. You will help us build out a world class capability to align with our key stakeholders in the Games teams to provide a clear plan, review and support with threat modelling, architecture best practices, secure development lifecycle and overall risk remediation.

This is a hybrid role : Location: Cambridge, UK with travel to the office once per week.

What you'll be doing:

• Provide guidance on security best practices and compliance and undertake security testing

• Identify Application security risks and requirements for new projects and system developments

• Represent cyber in review sprints on application security prior to live implementation

• Collaborate with the architecture and development teams to review the design and code for security vulnerabilities

• Establish a threat modelling capability and evangelise secure coding in the development lifecycle

• Provide technical specialist advice to ensure that security standards are understood and can be complied with

• Develop security testing plans and integrate into the software development lifecycle (S-SDLC)

• Perform and oversee security testing and manage remediation of identified vulnerabilities

• Take part in the security incident response team

• Prepare and monitor application security metrics and KPIs

Note: This position will require participation in an on-call rotation

What we're looking for:

• At least 3 years of experience in software engineering.

• At least 2 years of experience in application security.

• In-depth knowledge of application security vulnerabilities, testing techniques, and the OWASP framework.

• Team player able to build relationships across the organization.

• In-depth understanding of secure web application development.

• Experience in web application and Agile development methodologies.

• Comprehensive knowledge of IT and information security subject matter.

• Exposure to methods of promoting security awareness.

• Strong communication (verbal/written) and influencing skills, with an ability to manage internal and external relationships up to senior levels of management.

• Anticipates problems and identifies long-term implications of decisions and actions.

• Ability to work and learn alone.

• Able to prioritize workload and drive work to set deadlines.

• Experience working with the hacker/pen-testing community.

What we offer:

When you join Jagex you can look forward to a generous Perks & Benefits package including:

• Private Healthcare, including Dental Plan.
• Minimum 6% Pension contributions.
• Employee Assistance Programme & onsite Counselling.
• Life Insurance.
• Discretionary annual performance bonus.
• Enhanced family leave policies from day 1.
• Flexible working hours.
• 25 days annual leave + Bank holidays & the option to buy/sell holidays + so much more!

About Jagex:

Jagex is a leader in developing and publishing deep, engaging online games that connect millions of players worldwide. Best known for the RuneScape franchise, which includes two of the world’s longest running and most successful MMORPGs, in Old School Runescape and Runescape, and the open-world survival crafting game, Runescape: Dragonwilds; we have proven success in delivering immersive Forever Games and fostering strong player communities.

We strive to foster an inclusive workplace built on trust, autonomy, and a shared passion for creating forever games.
Our values guide everything we do: We Embrace Fellowship by collaborating and sharing openly. We Hone our Craft by always learning and improving; we Honour our Vows by being honest and transparent; we are our Customers’ Heroes by striving to understand our team & player needs, and we Seize The Day by making the most of every opportunity.

With over two decades of experience, and over 400 people in our team, we continue to innovate in live game development, leveraging data-driven insights, and a commitment to player-first game design. We have a diverse and talented team where creativity, collaboration, and community-driven game development drives everything we do.

As part of Jagex, you’ll have the opportunity to work on a globally successful franchise, contribute to exciting new projects, and be part of a company that hugely values both our employees and our players.