Application Security Engineer: Vulnerability & Cloud Security

PEI Group; United States; Hybrid; USD 120,000 - 170,000; Full time

Benefits offered by this job

25 days annual leave

8 bank holidays

10 days rolling sick leave

Private medical insurance

Life insurance (4x salary)

Pension scheme with matched contrib

Cycle to work scheme

Job summary

PEI Group is seeking an Application Security Engineer to drive vulnerability management and secure product development across IT, Product, Engineering and Cloud Platform teams. You will work with the Information Security and Governance Manager to embed security into design, delivery and DR planning.

The role emphasizes collaboration with third parties for Penetration Testing and staying current on AI security best practices, with participation across PEI's global operations.

Qualifications

• 2+ years AWS architecture and security practices.
• 2+ years vulnerability management experience.
• Ability to communicate security impact to execs/engineers.
• Ability to scope and engage in penetration testing with partners.
• Articulate security use cases to project/sprint leads.
• Desirable: security quality gates for CD in engineering.
• Desirable: 2+ years Azure architecture and security.

Responsibilities

• Manage the Vulnerability Management Programme with reporting.
• Operate security tooling and ensure correct outputs for teams.
• Provide security assurance in system and application design.
• Contribute security input to disaster recovery plans and tests.
• Offer adhoc security guidance to teams as issues arise.

Skills

AWS architecture

Security best practices

Vulnerability management

Communication with execs

Penetration test scoping

Security use cases

Continuous Delivery security gates

Azure architecture

Generative AI safety

Infrastructure as code

Tools

Aws Inspector

Rapid7 Command Center

Snyk

SonarQube/SonarCloud

Job description

PEI Group is seeking an Application Security Engineer to drive vulnerability management and secure product development across IT, Product, Engineering and Cloud Platform teams. You will work with the Information Security and Governance Manager to embed security into design, delivery and DR planning.

The role emphasizes collaboration with third parties for Penetration Testing and staying current on AI security best practices, with participation across PEI's global operations.