27 days ago
Remote, United Kingdom or Birmingham, United KingdomSenior
Responsibilities
- Collaborate daily with application development and cloud platform teams to plan and prioritize security requirements within the secure software development lifecycle.
- Recommend cloud security best practices and automate compliance with security baselines such as CIS Benchmarks.
- Implement automated security tooling in continuous integration pipelines to validate security requirements and identify potential issues.
- Work with external organizations to plan, scope, and facilitate penetration tests.
- Review and prioritize security-tool outputs into actionable security stories for delivery teams.
- Verify the implementation of security principles, architectural patterns, and requirements.
- Drive adoption of vulnerability management, threat modelling, and other cybersecurity practices within Agile delivery teams.
- Coach and develop more junior team members.
Requirements
- Experience implementing application security or cloud platform security.
- Experience in the Defence Sector and active security clearance.
- Detailed understanding of web application security.
- Understanding of modern cryptography, including encryption in transit, encryption at rest, hashing, and digital signatures.
- Understanding of threat modelling, vulnerability management, application security testing, and penetration testing.
- Experience integrating static and dynamic analysis tools into the secure software development lifecycle.
- Experience using Git and Bash, PowerShell, Python, Java, .NET, JavaScript, Terraform, ARM Templates, or Ansible to automate tasks.
- Ability to explain security issues to technical and non-technical audiences.
- An industry-recognized cybersecurity qualification is desirable.
- AWS or Azure mid-level certifications are desirable.
- Participation in cybersecurity communities such as OWASP, HackTheBox, or CTFs is desirable.
- Experience with Scrum or Kanban software development methodologies is desirable.
Benefits
- People-first culture with support for professional growth and development.
- Inclusive workplace committed to diversity, equity, and inclusion.
- Recruitment accommodations and adjustments available through the talent acquisition team.
