Application Security Specialist – DevOps
Jagex
full-time
Posted on:
Location Type: Hybrid
Location: Cambridge • United Kingdom
Visit company websiteExplore more
Tech Stack
About the role
- Provide guidance on security best practices and compliance and undertake security testing
- Collaborate with the architecture and development teams to review the design and code for security vulnerabilities
- Embed/improve security threat modelling and secure coding in the development lifecycle
- Provide technical specialist advice to ensure that security standards are understood and can be complied with
- Develop security testing plans and integrate into the software development lifecycle
- Perform and oversee security testing and manage remediation of identified vulnerabilities
- End-to-end work on reported vulnerabilities as part of the bug bounty program
- Take part in the security incident response team
- Monitor and proactively report on current threats and vulnerabilities to application security
- Prepare and monitor application security metrics and KPIs
- Initiate and automate processes for detecting and monitoring the platform security and integrate security tools into the S-SDLC
Requirements
- At least 3 years of experience in software engineering.
- At least 2 years of experience in application security.
- In-depth knowledge of application security vulnerabilities, testing techniques, and the OWASP framework.
- Team player able to build relationships across the organization.
- In-depth understanding of secure web application development.
- Experience in web application and Agile development methodologies.
- Comprehensive knowledge of IT and information security subject matter.
- Exposure to methods of promoting security awareness.
- Strong communication (verbal/written) and influencing skills, with an ability to manage internal and external relationships up to senior levels of management.
- Anticipates problems and identifies long-term implications of decisions and actions.
- Ability to work and learn alone.
- Able to prioritize workload and drive work to set deadlines.
- Experience working with the hacker/pen-testing community.
Benefits
- Private Healthcare, including Dental Plan.
- Discretionary annual performance bonus.
- Minimum 6% Pension contributions.
- Life Insurance.
- Enhanced family leave policies from day 1.
- Flexible working hours.
- 25 days annual leave + Bank holidays & the option to buy/sell holidays + so much more!
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
application securitysecurity testingsecure codingsecurity threat modellingOWASP frameworkAgile development methodologiesvulnerability managementbug bounty programapplication security metricsS-SDLC
Soft Skills
team playerstrong communicationinfluencing skillsrelationship managementproblem anticipationindependent learningwork prioritizationdeadline management