Application Security Engineer

ISS - Information Systems Services

Salary: £46,485 - £55,295
Closing Date: Wednesday 11th December 2024
Interview Date: w/c 16th December 2024

As an Application Security Engineer, you will be responsible for identifying and mitigating security vulnerabilities throughout the entire application development life cycle by implementing effective tools and processes. You will set and maintain security standards for applications, including mobile platforms, APIs, and microservices, utilising DevSecOps principles to proactively strengthen security practices.

Duties include:

• Using up-to-date technical knowledge, ensure engineering teams adopt security practices in software design and development.
• Guide developers in triaging and fixing security bugs at the earliest stage of the software development life cycle.
• Implement and maintain tools which prevent and detect applications from attacks.
• Create and maintain documentation such as standards, templates, and diagrams.
• Respond rapidly and professionally to Information security incidents and manage the situation with appropriate and sensitive handling of affected staff/students.
• Research, develop, implement and operate security engineering and assurance tools which integrate security automation into pipelines.
• Review and assist in the remediation of issues highlighted as part of security scans.
• Ensure code reviews are adhered to across all code platforms.
• Act as a subject matter expert and point of contact for secure development practices.
• Identify and create subject specific training for target audience.
• Perform security-focused code reviews.

We warmly welcome applicants from all sections of the community regardless of their age, religion, gender identity or expression, race, disability or sexual orientation, and are committed to promoting diversity, and equality of opportunity.

If interested, apply now and submit your CV alongside an optional Coversheet up to a maximum of two A4 pages.