At a Glance
- Tasks: Join a tech transformation journey, ensuring security in software design and implementation.
- Company: Leading financial services firm with a focus on innovation and technology.
- Benefits: Competitive salary of £90,000, great benefits, and opportunities for rapid career progression.
- Why this job: Be at the forefront of technology change while making a real impact on security.
- Qualifications: Experience in application security, proficiency in Python or similar, and relevant certifications.
- Other info: Inclusive workplace committed to accessibility and diversity.
The predicted salary is between 72000 - 108000 £ per year.
Job Description
Application Security Engineer
Bristol or Edinburgh
£90,000 + great benefits
An impressive financial services business is looking to hire an Application Security Engineer to support this team with the risk and remediation activities. This business is going through a big technology transformation programme that is estimated to take 3 -5 years. The successful Application Security Engineer will be part of this journey and have great technical exposure and the ability to rapidly progress. Working closely in one of transformation projects, the successful Application Security Engineer will work closely with the wider security and technology teams to define the strategy and roadmap of technology changes moving forward.
Application Security Engineer
Duties and Responsibilities
The successful Application Security Engineer will:
- Provide security input into solution design to ensure that security principles are incorporated at both the platform and software level
- Automate tooling to run security fixes over a variety of repo's
- Ensure that security requirement input is provided across the programme to ensure that the new technology is secure by design
- Support the teams to interpret security requirements of the project
- Conduct threat modelling and pen testing to identify threats and establish controls
- Support wider teams with security advice and guidance in both a verbal and written format
- Lead delivery of hands-on security engineering solutions when needed
Application Security Engineer – Your Background
The ideal Application Security Engineer will have:
- Experience in a similar role, in both responsibility and scale
- Proficiency with one of the following: Python, Jenkins, Powershell, Bash, GitHub Actions
- Relevant professional certifications for example:
- CISSP
- SANS
- Crest/CHECK
- Strong understanding of shift left
- Proven experience with of working with development teams on security related topics
- Either hands on secure software development or applications security testing
- Likely come from a pen testing, SRE, or Software Development Background
We invite individuals from underrepresented groups to apply for any of our roles and are committed to supporting accessibility needs.
Application Security Engineer employer: Spencer Rose Ltd
Contact Detail:
Spencer Rose Ltd Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Application Security Engineer
✨Tip Number 1
Network like a pro! Reach out to folks in the industry on LinkedIn or at local meetups. We all know that sometimes it’s not just what you know, but who you know that can help you land that Application Security Engineer role.
✨Tip Number 2
Show off your skills! Create a portfolio showcasing your projects, especially those involving Python, Jenkins, or any relevant security tools. We want to see how you’ve tackled real-world problems and made an impact.
✨Tip Number 3
Prepare for the interview by brushing up on your threat modelling and pen testing knowledge. We recommend practising common interview questions and scenarios related to application security to boost your confidence.
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, we love seeing candidates who are proactive about their job search!
We think you need these skills to ace Application Security Engineer
Some tips for your application 🫡
Tailor Your CV: Make sure your CV is tailored to the Application Security Engineer role. Highlight your experience with security principles, automation tools, and any relevant certifications. We want to see how your background aligns with our needs!
Craft a Compelling Cover Letter: Your cover letter is your chance to shine! Use it to explain why you're passionate about application security and how you can contribute to our technology transformation programme. Keep it engaging and personal – we love a good story!
Showcase Your Technical Skills: Don’t forget to showcase your technical skills in your application. Mention your proficiency in Python, Jenkins, or any other relevant tools. We’re looking for someone who can hit the ground running, so let us know what you bring to the table!
Apply Through Our Website: We encourage you to apply through our website for a smoother process. It helps us keep track of applications and ensures you get all the updates directly from us. Plus, it’s super easy – just a few clicks and you’re done!
How to prepare for a job interview at Spencer Rose Ltd
✨Know Your Tech Inside Out
Make sure you brush up on your technical skills, especially in Python, Jenkins, and security principles. Be ready to discuss how you've applied these in past roles, particularly in relation to secure software development or application security testing.
✨Understand the Company’s Transformation
Research the financial services business and their technology transformation programme. Knowing their goals and challenges will help you tailor your responses and show that you're genuinely interested in being part of their journey.
✨Prepare for Scenario-Based Questions
Expect questions that ask you to demonstrate your problem-solving skills in real-world scenarios. Think about past experiences where you conducted threat modelling or pen testing, and be ready to explain your thought process and the outcomes.
✨Showcase Your Communication Skills
As you'll be providing security advice and guidance, it's crucial to demonstrate your ability to communicate complex ideas clearly. Practice explaining technical concepts in simple terms, as this will show your potential to work effectively with wider teams.