Key skills
CloudSDLCGoOWASP
About this role
Role Overview
- You will be involved across three key areas of product security: External testing, Internal testing, Secure development lifecycle (SDLC)
- Working with third party partners to meet regulatory requirements and making sure we are always one step ahead
- Supporting annual and quarterly security testing
- Choosing the right external tools and providers
- Turning findings into clear, actionable improvements across our platform
- Taking ownership of how we proactively test and improve our security internally
- Running automated and manual security testing across our sites
- Identifying and prioritising vulnerabilities across the platform
- Continuously improving our tooling to keep pace with evolving threats
- Embedding security into how we build, not just how we test
- Partnering with developers, product and infrastructure teams
- Helping prioritise and resolve vulnerabilities early in the lifecycle
- Supporting pre go live testing to reduce risk
- Building and integrating security tooling into CI CD pipelines
- Empowering teams to make better security decisions from day one
Requirements
- A genuine interest in security and staying up to date with new threats
- Experience working in or alongside a security function
- Confidence identifying problems and figuring out the best way to solve them
- Understanding of security frameworks and standards such as ISO, NIST or PCI
- Experience working with developers or within a secure development lifecycle
- Awareness of common vulnerabilities such as OWASP Top Ten
- Familiarity with cloud platforms and modern development environments
- Ability to script or automate tasks where needed
- Experience working with third party vendors or penetration testers
Tech Stack
- Cloud
- SDLC
Benefits
- Doing things the right way
- Supporting each other
- Building products we are proud of