Application Security Engineer

Application Security Engineer

Location: London (fully onsite)

DGH Recruitment are currently recruiting on behalf of a leading global client in the financial services industry who are looking for an Application Security Engineer to join the team on a permanent basis.

They are looking for an individual that speaks the language of developers, thrives within a purple team space and has a passion for automation.

The role will work alongside engineering and IT teams to enhance application security, API's and infrastructure by implementing preventative controls and identifying risks through testing.

Responsibilities:
- Act as a security champion to foster the secure by design approach
- Support the identification and analysis of web application security vulnerabilities
- Oversee daily management of application security platforms to maintain coverage, compliance and remediation of findings
- Conduct threat modelling and review application architectures
- Implement application security controls and proactive measures to prevent security incidents
- Implement and manage SAST / SCA tooling across application repositories to identify source code risks
- Scale automated DAST solutions across applications to maximise testing coverage
- Carry out penetration testing on internally developed applications

Required Skills / Experience:
- Experienced in application security focussing on red, blue or purple team activities
- Experienced in software development or experience contributing to Open-Source projects
- Experienced with DAST tools such as Burp Suite, OWASP Zap or similar
- Experience with SAST/SCA tools such as Snyk, Veracode, Checkmarx or similar
- Proficient in one or more of the following languages - Python, JavaScript, .NET or Java
- Demonstrated experience with development tools including GitLab/GitHub, Datadog, Jira, Docker, and various IDEs

Desirable Skills / Experience:
- Experience with cloud services, particularly AWS services like WAF, Cognito etc
- Experience working with Infrastructure as Code, Kubernetes and Containers
- Experience with auth mechanisms like Open ID Connect, OAuth and identity providers

Application Security Engineer

In accordance with the Employment Agencies and Employment Businesses Regulations 2003, this position is advertised based upon DGH Recruitment Limited having first sought approval of its client to find candidates for this position.

DGH Recruitment Limited acts as both an Employment Agency and Employment Business