Lead Offensive Security Engineer - SaaS & CI/CD Security

CHAMP Cargosystems UK Ltd; England; On-site; GBP 70,000 - 90,000; Full time

Job summary

A tech company specializing in security solutions is seeking an Offensive Security Engineer to enhance their Product Security Team. This role involves directing penetration testing, guiding secure software development within an agile environment, and establishing coding standards for Java applications. The ideal candidate will possess an advanced degree in a related field, over 8 years of experience in software and application security, and strong communication abilities to engage with various stakeholders. A commitment to fostering a security-minded team culture is essential.

Qualifications

• 8+ years of experience in software development and application security, preferably with Java web applications.
• Certifications such as OSCP or CISSP, CISM are desirable.
• Experience in SaaS environments and familiarity with compliance frameworks (ISO27001, SOC2).

Responsibilities

• Drive penetration testing capability and secure software development practices.
• Establish secure coding standards for Java web applications.
• Integrate automated security testing into CI/CD pipelines.
• Mentor team members and foster a culture of continuous improvement.

Skills

Secure development practices

Threat modeling

Vulnerability management

SAST/DAST tools

Agile/SCRUM

Education

Bachelor's or Master's degree in Software Engineering, Cybersecurity or related field

Tools

CI/CD integration

Job description

A tech company specializing in security solutions is seeking an Offensive Security Engineer to enhance their Product Security Team. This role involves directing penetration testing, guiding secure software development within an agile environment, and establishing coding standards for Java applications. The ideal candidate will possess an advanced degree in a related field, over 8 years of experience in software and application security, and strong communication abilities to engage with various stakeholders. A commitment to fostering a security-minded team culture is essential.