Application Security Engineer (AWS)

DGH Recruitment; Dublin; On-site; EUR 90,000 - 120,000; Full time

Job summary

DGH Recruitment are recruiting an Application Security Engineer for a permanent role in Dublin. The candidate will work with engineering and IT teams to enhance application security, APIs and infrastructure by implementing preventative controls and testing for risks.

Responsibilities include championing secure-by-design, managing security tools (DAST, SAST/SCA), threat modelling, and implementing IAM/auth mechanisms with cloud services (AWS). Office presence required in Dublin.

Qualifications

• Experience in application security with red/blue/purple team activities.
• Development experience or contribution to Open-Source projects.
• Hands-on with DAST tools (Burp Suite, OWASP ZAP or equivalent).
• Experience with SAST/SCA tools (Snyk, Veracode, Checkmarx or equivalent).
• Familiar with GitHub/GitLab, Datadog, Jira, Docker and IDEs.
• Cloud experience (AWS) and related services (WAF, Cognito).
• Knowledge of IaC, Kubernetes and container ecosystems.
• Experience with authentication protocols such as OpenID Connect and OAuth.

Responsibilities

• Act as security champion to promote secure-by-design practices.
• Identify and analyse web app security vulnerabilities.
• Oversee application security platforms for coverage, compliance, remediation.
• Carry out threat modelling and review architectures.
• Implement safeguards to prevent security incidents.
• Manage SAST/ SCA tools across code repositories; extend DAST coverage.
• Scale automated testing to maximize coverage; conduct pen tests on in-house apps.

Skills

Application security

Purple team

Software development

DAST tooling

SAST/SCA tooling

GitHub/GitLab

Datadog

Jira

Docker

AWS

Kubernetes

OIDC/OAuth

Tools

GitHub/GitLab

Datadog

Jira

Docker

Kubernetes

Job description

Location: Dublin (3 days per week required in the office)

DGH Recruitment are currently recruiting on behalf of a leading global client in the financial services industry who are looking for an Application Security Engineer to join the team on a permanent basis.

They are looking for an individual that speaks the language of developers, thrives within a purple team space and has a passion for automation.

The role will work alongside engineering and IT teams to enhance application security, API's and infrastructure by implementing preventative controls and identifying risks through testing.

Responsibilities:

• Act as a security champion to foster the secure by design approach
• Support the identification and analysis of web application security vulnerabilities
• Oversee daily management of application security platforms to maintain coverage, compliance and remediation of findings
• Conduct threat modelling and review application architectures
• Implement application security controls and proactive measures to prevent security incidents
• Implement and manage SAST / SCA tooling across application repositories to identify source code risks
• Scale automated DAST solutions across applications to maximise testing coverage
• Carry out penetration testing on internally developed applications

Required Skills / Experience:

• Experienced in application security focussing on red, blue or purple team activities
• Experienced in software development or experience contributing to Open-Source projects
• Experienced with DAST tools such as Burp Suite, OWASP Zap or similar
• Experience with SAST/SCA tools such as Snyk, Veracode, Checkmarx or similar
• Demonstrated experience with development tools including GitLab/GitHub, Datadog, Jira, Docker, and various IDEs
• Experience with cloud services, particularly AWS services like WAF, Cognito etc
• Experience working with Infrastructure as Code, Kubernetes and Containers
• Experience with auth mechanisms like Open ID Connect, OAuth and identity providers