About the Role
Our client, a global Tier 1 investment bank, is looking for an experienced Application Security Engineer who has prior experience in Software Engineering and is familiar with Software Development Lifecycle practices.
Responsibilities
•Work as part of a team of software and security engineers to design/maintain and build best-in-class product security tools and services
•Act as technical point of contact for product teams regarding automation, CI/CD, and Product Application Security Operations
•Use approved AI models and cyber harnesses to assess application code for business logic weaknesses, misconfiguration and vulnerabilities
•Build tools and automation scripts that enable developers to easily consume security services delivered by the Security Engineering and Automation team
•Responsible for security product QA and testing
•Build strong relationships with product development teams
•Run software composition analysis (SCA) tools
•Understand and explain penetration testing findings to the software engineering teams, helping them triage findings and explaining how to mitigate risks
•Articulate business risk when assessing software vulnerabilities
•Continuously improve the operations of SAST, DAST and IaC security tools
•Continuously improve the operations of Web Application Firewalls (WAF) or IDS
•Continuously improve the coverage of security tooling in Cloud environments, e.g. Microsoft Azure & Amazon AWS
Requirements
•Application Development background
•Experience in Application or Product Security
•Prior experience using AI models and cyber harnesses to support security evaluation of application and software code
•GitHub, Copilot, Codex, OWASP Top 10 for Agentic AI, AI skills development and security triage
•Ability to code in at least one programming language, e.g. Python/JavaScript/CSharp/Powershell
•Excellent analytical skills with attention to detail
•CISSP/CSSLP/CEH/OSCP or similar certification
•Team-player interpersonal skills, with the ability to communicate and collaborate effectively with different people in a variety of roles
•Passionate about developing a career in Information Security
•Computer Science / Cyber Security Degree
•Excellent command of the English language, both written and spoken
•Passionate about mastering and innovating best practice in business analysis
•Inspiring and collaborative leader, model of agile leadership approach
•Friendly, approachable, enjoys working with people from a variety of backgrounds
•Capable of remaining positive when under pressure
•Continuous improvement mind-set, challenges the status quo and seeks self improvement
•Problem solver, comfortable taking the initiative in challenging and ambiguous circumstances
Nice to Have
•Prior experience working in a large organisation or Financial Services, as well as in Software Engineering
Conditions
No conditions specified in the posting.
