DevSecOps-Driven Application Security Architect

Insight Investment; Manchester; On-site; GBP 70,000 - 100,000; Full time

Job summary

A prominent investment firm in the UK is looking for an Application Security Architect to join its Cyber Security team in Manchester. This role emphasizes integrating security throughout the software development lifecycle and driving DevSecOps practices. The ideal candidate should possess a deep technical background in application security, secure coding, and automation within CI/CD processes. Responsibilities include collaborating with development teams, implementing security practices, and conducting assessments on applications and APIs.

Qualifications

• Strong understanding of application security principles, including OWASP Top 10.
• Hands-on experience with various security tools for SAST, DAST, and SCA.
• Familiarity with CI/CD tools and secure practices in containerized environments.

Responsibilities

• Collaborate with teams to integrate security into the software development lifecycle.
• Design and implement secure coding practices and threat modelling processes.
• Lead the integration of security tools into CI/CD pipelines.

Skills

Application security principles

Secure coding

Automation within CI/CD

Container security

Cloud security

Threat modeling

Tools

Veracode

Burp Suite

OWASP ZAP

Snyk

Aqua Security

Job description

A prominent investment firm in the UK is looking for an Application Security Architect to join its Cyber Security team in Manchester. This role emphasizes integrating security throughout the software development lifecycle and driving DevSecOps practices. The ideal candidate should possess a deep technical background in application security, secure coding, and automation within CI/CD processes. Responsibilities include collaborating with development teams, implementing security practices, and conducting assessments on applications and APIs.