Position: Application Security Engineer
Company: Intellias
Experience required: 3y
English level: upper

Role Description:

As an Application Security Engineer, you will utilize your experience of AWS cloud configuration, DevSecOps tooling, and security to protect the business against threats and to enhance and develop the application security posture.

You will be working closely with internal stakeholders to implement new security technologies and strategies to support the business. You will help develop the vision on how application security can support the company's ongoing growth, whilst also providing expert advice and best practices across application security management.

The role will report into the Head of Cyber Security and will support the attainment of the security requirements of the organisation.

 

Responsibilities:

Leading and supporting application security reviews and threat modeling, including code review and dynamic testing using industry tools and best practices.
Working closely with our engineering and product teams, perform application security
vulnerability management.
Ensure application security is at the heart of everything we build by providing support and consultation with our product and engineering teams.
Assist in the creation of security training across our different squads.
Working with other members of the team to further develop and enhance automated security testing to validate that secure coding best practices are being followed and implemented.
Implementation of processes, policies, and guidelines around application security incident response and management.
Exposure to threat intelligence tooling, to understand possible security threats to the
organization and to establish methods to detect and respond to those threats (or proactively prevent them from occurring).
Requirements:
Requirements:

Minimum of 3 years' experience in the application security field; familiarity with applicable application security standards, methods, models, and approaches
At least one scripting language knowledge (Python, Ruby, etc.)
Familiarity with security and compliance frameworks such as NIST, CIS and ISO
Demonstrable experience of working with AWS Cloud
Familiar working with Gitlab CI/CD to support security tools embedded into pipelines
Good understanding of security architecture principles
Good awareness of cybersecurity trends
Excellent communication skills; comfortable to represent the cyber security team at all levels of the organization, and with partners and vendors
Nice to have:

Experience in working with Snyk would be beneficial
Working knowledge of Terraform is desirable
Higher Education: A degree in Computer Science, IT, Systems Engineering or a related qualification