Application Security Engineer / DevSecOps Specialist

• Embed security controls within the software development life cycle.
• Perform secure design reviews for applications and APIs.
• Conduct SAST, DAST and software composition analysis.
• Support remediation of vulnerabilities with development teams.
• Integrate security tooling into CI/CD pipelines.
• Define secure coding standards aligned to OWASP best practice.
• Conduct threat modelling for critical systems.
• Ensure secure cloud configurations.
• Develop detection’s for application security events and support incident response for application-related threats.
• Maintain the application risk register and vulnerability tracking.
• Provide guidance and training to developers on secure coding.
• Support security improvement and DevSecOps maturity initiatives., At Core-Asset, we’re committed to protecting and respecting your privacy. Our privacy statement explains when and why we collect personal information about people who engage with our services, how we use it, the conditions under which we may disclose it to others, and how we keep it secure. We may change this policy from time to time, so please check this policy occasionally to ensure that you’re happy with any changes.

• Experience securing applications in cloud environments, ideally Azure
• Strong understanding of OWASP vulnerabilities.
• Software development experience ideally with C# / .NET.
• Knowledge of CI/CD pipelines and working with Azure Devops
• Experience with SAST, DAST and software composition analysis tools.
• Understanding of authentication, including OAuth2 and OpenID Connect.
• Experience managing and remediating vulnerabilities.
• Strong analytical and communication skills.
• Strong technical aptitude across application and cloud security.
• Ability to work effectively in agile environments.

Core-Asset Consulting offers specialist recruitment services to asset management, accounting & finance, asset servicing, legal and the wider financial services sector in Scotland.