At a Glance
- Tasks: Lead application security reviews and embed security in the Software Development Lifecycle.
- Company: Join a leading enterprise technology firm in the banking sector.
- Benefits: Competitive daily rate, hybrid work model, and potential for contract extension.
- Other info: Immediate interview availability and excellent career growth opportunities.
- Why this job: Make a real impact on application security in a dynamic, cloud-based environment.
- Qualifications: 8+ years in Cyber Security with strong DevSecOps and application security experience.
The predicted salary is between 63000 - 77000 £ per year.
Senior Application Security Consultant (SAST/DAST/OWASP )/ Dev Sec Ops Security - Banking - London
Secure SDLC | SAST | DAST | Threat Modelling | Cloud Security | CI/CD
Location
London (Hybrid - 8 days onsite per month)
Contract
12 Months + extension
Rate
£500-£550 per day (Umbrella)
The Opportunity
We're looking for an experienced
Senior Application Security Consultant / Dev Sec Ops Security Architect to join a high-performing Cyber Security function within a large enterprise technology environment.
Working alongside software engineering, cloud, architecture and Dev Ops teams, you'll play a key role in embedding security throughout the Software Development Lifecycle, ensuring applications are designed, developed and deployed securely.
This is an excellent opportunity for someone passionate about Secure-by-Design, Dev Sec Ops and modern Application Security within a large-scale cloud environment.
Key Responsibilities
- Lead application security reviews across business-critical applications and cloud platforms.
- Conduct security architecture and secure design reviews.
- Perform application security risk assessments and define security requirements.
- Lead Threat Modelling workshops using STRIDE, MITRE ATT&CK or similar methodologies.
- Embed Secure SDLC principles into engineering teams.
- Integrate security tooling into CI/CD pipelines and Dev Sec Ops processes.
- Review and analyse SAST, DAST and Software Composition Analysis (SCA) findings.
- Work closely with development teams to prioritise vulnerability remediation.
- Define security testing requirements and support penetration testing activities.
- Produce security standards, technical guidance and best practice documentation.
- Act as the Application Security SME across multiple technology programmes.
Essential Skills
- Application Security
- Secure Software Development Lifecycle (SSDLC)
- OWASP Top 10
- Secure Coding
- Secure Design Reviews
- API Security
- REST APIs
- Microservices Security
- Application Security Risk Assessments
- Threat Modelling
- STRIDE
- MITRE ATT&CK
- Security Architecture
- Risk Assessments
- Dev Sec Ops
- CI/CD Security
- Git Hub Actions
- Git Lab
- Jenkins
- Azure Dev Ops
- Security Automation
- Shift Left Security
- Security Testing
- SAST
- DAST
- SCA
- Vulnerability Management
- Penetration Testing
- Cloud Security
- AWS, Azure or GCP
- Kubernetes
- Docker
- Container Security
- Cloud Security Best Practices
- Security Tooling
Experience with one or more of
- Checkmarx
- Fortify
- Sonar Qube
- Veracode
- Semgrep
- Burp Suite
- OWASP ZAP
- Snyk
- Trivy
- Prisma Cloud
- Aqua
- Wiz
- Ideal Background
You’ll ideally have
- 8+ years in Cyber Security
- Strong Application Security or Dev Sec Ops experience
- Experience working directly with software engineering teams Experience embedding security into CI/CD pipelines
- Strong knowledge of Secure SDLC
- Experience conducting Threat Modelling sessions
- Excellent stakeholder management and communication skills
- Previous experience within Banking, Financial Services, Insurance or another highly regulated enterprise environment
- Contract Details
- 12-month contract
- £500-£600 per day (Umbrella)
- Hybrid working - 8 days onsite per month in London
- Immediate interview availability preferred
- *Rates depend on experience and client requirements
- #J-18808-Ljbffr
Senior Application Security Consultant (SAST/DAST/OWASP ) employer: Xpand Group
Xpand Group is an exceptional employer that fosters a collaborative and innovative work culture, making it an ideal place for professionals looking to make a significant impact in the retail sector. With a strong emphasis on employee growth and development, team members are encouraged to enhance their skills through continuous learning opportunities while working on cutting-edge planning solutions for a leading consumer brand. The hybrid work model offers flexibility, allowing employees to balance their professional and personal lives effectively.
StudySmarter Expert Advice🤫
We think this is how you could land Senior Application Security Consultant (SAST/DAST/OWASP )
✨Get Engaged in Cybersecurity Communities
Dive into online forums or local meetups, like OWASP events or Cybersecurity conferences. These spaces are packed with pros who can share insights and might even know about temporary roles at places like Xpand Group.
✨Showcase Your Skills Publicly
Link your GitHub or create a series of blogs sharing your knowledge on cybersecurity topics. It’s a great way to demonstrate your expertise and attract attention from hiring managers, especially when they see your passion in action.
✨Stay On Top of Temp Opportunities
Keep an eye on platforms that list temporary positions specifically in tech. Websites focusing on contract roles in cybersecurity can lead straight to employers like Xpand Group.
✨Make Contact with Recruiters Specialising in Cybersecurity
Reach out to recruitment agencies that focus on cybersecurity roles. They often have insights into temporary roles before they’re advertised and can put your name forward to companies like Xpand Group.
We think you need these skills to ace Senior Application Security Consultant (SAST/DAST/OWASP )
Some tips for your application 🫡
Show Off Your Technical Skills:In cybersecurity, it's vital to highlight your skills with relevant tools and technologies. Make sure your CV showcases your experience with firewalls, intrusion detection systems, and any cybersecurity frameworks you've worked with. This gives Xpand Group a clear view of your capabilities right off the bat.
Certifications Matter:If you’ve got any cybersecurity certifications, like CompTIA Security+ or CISSP, flaunt them! These not only validate your skills but also show that you’re committed to the field. Add a section to your CV specifically for this, because in a temporary role like this, those credentials can really set you apart.
Tailor Your Cover Letter to the Role:For a temporary position, we want to see your willingness to learn and adapt quickly. Make your cover letter specific to the role at Xpand Group; mention why you’re excited about the opportunity and how it fits your career goals. A personal touch can make a big difference!
Don’t Forget the Soft Skills:In cybersecurity, technical skills are crucial, but so are soft skills like teamwork and communication. Make sure to weave examples of how you've collaborated with teams or communicated complex ideas into your application. This shows that you're not just a tech whizz but also a great team player, perfect for a temporary role at Xpand Group.
How to prepare for a job interview at Xpand Group
✨Brush Up on Technical Skills
Make sure you’re familiar with the latest cybersecurity tools and techniques, like firewalls, intrusion detection systems, and malware analysis. During the interview with Xpand Group for the Senior Application Security Consultant (SAST/DAST/OWASP ), be prepared to discuss specific scenarios where you tackled security threats or vulnerabilities.
✨Show Your Problem-Solving Prowess
Cybersecurity is all about thinking on your feet. Expect technical questions that require you to demonstrate your problem-solving abilities. You might be presented with a mock security breach scenario, so practising your responses to potential threats can be a game changer!
✨Demonstrate Your Adaptability
As this is a temporary role, showing that you're adaptable and quick to learn is crucial. Talk about times you've picked up new skills or reacted to changing situations quickly. Employers want to know you can hit the ground running and keep things secure during your short stay at Xpand Group.
✨Bring Relevant Certifications
If you have any relevant cybersecurity certifications, like CompTIA Security+ or CEH, be sure to mention them. This can really help you stand out during a temporary hiring process, as it showcases your commitment to the field and your readiness to take on the Senior Application Security Consultant (SAST/DAST/OWASP ) role at Xpand Group.
