Provide guidance on security best practices and compliance and undertake security testing
Collaborate with the architecture and development teams to review the design and code for security vulnerabilities
Embed/improve security threat modelling and secure coding in the development lifecycle
Provide technical specialist advice to ensure that security standards are understood and can be complied with
Develop security testing plans and integrate into the software development lifecycle
Perform and oversee security testing and manage remediation of identified vulnerabilities
End-to-end work on reported vulnerabilities as part of the bug bounty program
Take part in the security incident response team
Monitor and proactively report on current threats and vulnerabilities to application security
Prepare and monitor application security metrics and KPIs
Initiate and automate processes for detecting and monitoring the platform security and integrate security tools into the S-SDLC

At least 3 years of experience in software engineering.
At least 2 years of experience in application security.
In-depth knowledge of application security vulnerabilities, testing techniques, and the OWASP framework.
Team player able to build relationships across the organization.
In-depth understanding of secure web application development.
Experience in web application and Agile development methodologies.
Comprehensive knowledge of IT and information security subject matter.
Exposure to methods of promoting security awareness.
Strong communication (verbal/written) and influencing skills, with an ability to manage internal and external relationships up to senior levels of management.
Anticipates problems and identifies long-term implications of decisions and actions.
Ability to work and learn alone.
Able to prioritize workload and drive work to set deadlines.
Experience working with the hacker/pen-testing community.

Private Healthcare, including Dental Plan.
Discretionary annual performance bonus.
Minimum 6% Pension contributions.
Life Insurance.
Enhanced family leave policies from day 1.
Flexible working hours.
25 days annual leave + Bank holidays & the option to buy/sell holidays + so much more!

Application Security Specialist – DevOps

Key skills