Remote Application Security Engineer — Build Secure Cloud Apps

Fanan Limited; United Kingdom; À distance; GBP 70 000 - 100 000; Plein temps

Résumé du poste

Intermedia is seeking an experienced Application Security Engineer to help us embed security into our cloud-based products. This full-remote role supports teams across Europe, the UK and beyond, reporting to the Global Security lead.

You will review design and architecture, collaborate with DevOps, run static/dynamic scans, and mentor engineers on secure coding practices. The ideal candidate has 3–5 years in the field, solid OWASP knowledge, and strong English communication.

Qualifications

• 3–5 years of experience in the application security field.
• Bachelor's or Master’s degree in a related field.
• Knowledge of secure coding practices and OWASP standards.
• Hands-on SDLC and DevSecOps experience.
• Experience with security tools (static/dynamic) like BurpSuite, ZAP, Snyk.

Responsabilités

• Perform design and architecture review of new features, suggest security requirements.
• Collaborate with DevOps and engineering teams, advising on security features and best practices in SDLC.
• Utilize static security scanning tools, review findings and coordinate remediation actions.
• Perform ongoing manual security assessments.
• Review the results of external penetration tests and communicate suggested fixes to development teams.
• Provide on-demand support on application security topics.
• Drive process improvement ideas.
• Assist with vetting and intake of defects from 3rd party security researchers via our Bug Bounty program.

Connaissances

Application security

OWASP

SDLC

DevSecOps

Static analysis

BurpSuite

ZAP

Snyk

Python

Cloud security

Docker

Kubernetes

Bug bounty

CTF

Formation

Bachelor's or Master's degree in related field

Outils

BurpSuite

ZAP

Snyk

Description du poste

Intermedia is seeking an experienced Application Security Engineer to help us embed security into our cloud-based products. This full-remote role supports teams across Europe, the UK and beyond, reporting to the Global Security lead.

You will review design and architecture, collaborate with DevOps, run static/dynamic scans, and mentor engineers on secure coding practices. The ideal candidate has 3–5 years in the field, solid OWASP knowledge, and strong English communication.