Application Security Engineer

DGH Recruitment

London, UK

21 days ago

Apply on www.totaljobs.com

Prepare application

Role details

Contract type

Permanent contract

Employment type

Full-time (> 32 hours)

Working hours

Regular working hours

Job source

www.totaljobs.com

Tech stack

Java (Programming Language) JavaScript (Programming Language) .NET Framework Application Programming Interfaces (APIs) Amazon Web Services Software System Penetration Testing JIRA Burp Suite Code Coverage Programming Tools Github Python (Programming Language)

+16 more

OAuth Open Source Technology Cloud Services Web Application Security Software Engineering Datadog Sonatype Software Security Veracode Gitlab Kubernetes Checkmarx Purple Team (Cyber Security) Docker Static Application Security Testing Dynamic Application Security Testing

Job description

DGH Recruitment are currently recruiting on behalf of a leading global client in the financial services industry who are looking for an Application Security Engineer to join the team on a permanent basis.

They are looking for an individual that speaks the language of developers, thrives within a purple team space and has a passion for automation.

The role will work alongside engineering and IT teams to enhance application security, API’s and infrastructure by implementing preventative controls and identifying risks through testing.

Responsibilities:

Act as a security champion to foster the secure by design approach
Support the identification and analysis of web application security vulnerabilities
Oversee daily management of application security platforms to maintain coverage, compliance and remediation of findings
Conduct threat modelling and review application architectures
Implement application security controls and proactive measures to prevent security incidents
Implement and manage SAST / SCA tooling across application repositories to identify source code risks
Scale automated DAST solutions across applications to maximise testing coverage
Carry out penetration testing on internally developed applications

Requirements

Experienced in application security focussing on red, blue or purple team activities

Experienced in software development or experience contributing to Open-Source projects
Experienced with DAST tools such as Burp Suite, OWASP Zap or similar
Experience with SAST/SCA tools such as Snyk, Veracode, Checkmarx or similar
Proficient in one or more of the following languages - Python, JavaScript, .NET or Java
Demonstrated experience with development tools including GitLab/GitHub, Datadog, Jira, Docker, and various IDEs

Desirable Skills / Experience:

Experience with cloud services, particularly AWS services like WAF, Cognito etc
Experience working with Infrastructure as Code, Kubernetes and Containers
Experience with auth mechanisms like Open ID Connect, OAuth and identity providers

About the company

In accordance with the Employment Agencies and Employment Businesses Regulations 2003, this position is advertised based upon DGH Recruitment Limited having first sought approval of its client to find candidates for this position.

DGH Recruitment Limited acts as both an Employment Agency and Employment Business