Senior Security Engineer

ASOS; London; On-site; GBP 50,000 - 90,000; Full time

Job summary

An established industry player seeks a passionate Security Engineer to enhance their security posture through innovative engineering practices. In this dynamic role, you'll collaborate with multidisciplinary teams to design and deliver secure enterprise solutions. Your expertise will empower engineers, ensuring high-quality applications while minimizing risk exposure. With a focus on automation and tool integration, you'll drive security initiatives that resonate across the organization. Join a vibrant tech community where your contributions will make a meaningful impact on the future of security in a fast-paced environment.

Benefits

Employee discount

Personal development opportunities

Employee sample sales

Access to LinkedIn learning materials

25 days paid annual leave

Discretionary bonus scheme

Private medical care scheme

Flexible benefits allowance

Qualifications

• Experience in Cloud Security or related roles with a focus on automation.
• Strong experience with CI/CD and scripting in a DevOps context.
• Understanding of security scanning practices like SAST and DAST.

Responsibilities

• Drive security efforts across engineering through scalable tool integrations.
• Provide documentation and support for teams using security tools.
• Stay updated on emerging security threats and industry trends.

Skills

Cloud Security

Platform Engineering

Software Engineering

Automation

DevOps

Scripting

Security Scanning Practices

Communication Skills

Agile Software Delivery

Security Best Practices

Tools

PowerShell

YAML

Python

C#

Java

Docker

Kubernetes

Job description

Company Description

We're ASOS, the online retailer for fashion lovers all around the world.

We exist to give our customers the confidence to be whoever they want to be, and that goes for our people too. At ASOS, you're free to be your true self without judgement, and channel your creativity into a platform used by millions.

But how are we showing up? We're proud members of Inclusive Companies, are Disability Confident Committed and have signed the Business in the Community Race at Work Charter and we placed 8th in the Inclusive Top 50 Companies Employer list.

Everyone needs some help showing up as their best self. Let our Talent team know if you need any adjustments throughout the process in whatever way works best for you.

Job Description

As one of our Security Engineers, you are passionate about security and great engineering practises. You will join a multidisciplinary team, working together with other Security Engineers, Product Managers and Security teams. As an Engineer, you will design, build and deliver secure, high-quality enterprise solutions across numerous initiatives within the organisation, spreading your security knowledge to an ever-expanding engineering community, increasing our security posture and helping identify and reduce our risk exposure when building applications.

You will use your strong software/platform engineering skillset to help design and build tooling and integrations across a wide range of areas. You will gain deep knowledge on automated security tools and support the delivery and maintenance of these tools to empower engineers to build high quality, secure applications with minimal disruption to their delivery. Your impact will be felt within Cyber Security and wider by our tech communities, engineers and operations teams.

Responsibilities

• Drive security efforts across ASOS Engineering (SecDevOps, Secure SDLC) through building scalable security tool integrations into the developer's workflow.
• Provide documentation, training, guidance and support to teams using our tools.
• Develop tools, services and scripts to support with internal Security projects.
• Support with security risk decisions and influence technical architecture.
• Support with Application Security Assessments (incl. Threat Modelling, Attack Surface Analysis, Application Security Architecture Reviews and Security Code Reviews) where required.
• Support with security training around Security Best Practices.
• Understand and support teams with adherence to regulations (e.g. GDPR, PCI-DSI)
• Defining and explaining security non-functional requirements for development teams.
• Ability to articulate mitigation and development techniques around emerging threats to technical and non-technical stakeholders
• Work with other Security Engineers on collaborative projects and deliverables that support other Security & Fraud functions and business needs.
• Stay updated on emerging security threats, industry trends, and evolving technologies.

Qualifications

About You

• Experience gained working in Cloud Security, Platform Engineering or Software Engineering or other related roles, with a leaning towards automation, DevOps and tooling
• Strong experience with scripting and automation within a CI/CD DevOps context
• A solid understanding of fundamental security scanning practises such as SAST, SCA, IAC Scanning, Credential Scanning, DAST
• Experience with implementing Application Security Tooling
• Experience building applications, scripts, pipelines or automation using modern technologies and languages such as PowerShell, YAML, Python, C#, Java, Docker, Kubernetes
• A good understanding of object-oriented software languages (e.g. C#, Java, Python)
• REST/Graph API experience
• Strong communication skills
• Experienced in agile software delivery and Software Development Lifecycle/Secure SDLC
• Experience with/understanding of DevOps/DevSecOps, Security best practices and driving cultural change.

Additional Information

BeneFITS'

• Employee discount (hello ASOS discount!)
• ASOS Develops (personal development opportunities across the business)
• Employee sample sales
• Access to a huge range of LinkedIn learning materials
• 25 days paid annual leave + an extra celebration day for a special moment
• Discretionary bonus scheme
• Private medical care scheme
• Flexible benefits allowance - which you can choose to take as extra cash, or use towards other benefits

Why take our word for it? Search #InsideASOS on our socials to see what life at ASOS is like.

Want to find out how we're tech powered? Check out the ASOS Tech Podcast here https://open.spotify.com/show/6rT4V6N9C7pAXcX60kzzxo . Prefer reading? Check out our ASOS Tech Blog here https://medium.com/asos-techblog.