Application Security Engineer

In this role, you'll play a pivotal part in ensuring the security and integrity of our software applications. You will be key in defending our digital assets against the ever-evolving landscape of cyber threats by staying up-to-date with the latest security technologies and best practices. The complex technical environment at Shawbrook will give you endless opportunities to learn and develop your skills, gaining exposure to a wide range of systems and software and taking ownership of more complex projects as you progress. Key Responsibilities - Conduct thorough code reviews, enhancing security and compliance. - Perform advanced penetration testing and vulnerability assessments. - Utilize Qualys and other patch management tools for up-to-date security. - Deploy Veracode and similar tools to remediate code security issues. - Collaborate with DevSecOps teams to automate security in the CI/CD pipeline. - Harness Azure and cloud security practices for secure cloud applications. - Apply OWASP's Top Ten knowledge to enhance web app security. - Stay updated on AI/ML for security threat prevention. - Secure containerized apps with Docker and Kubernetes. - Secure APIs using modern security mechanisms and protocols. - Web Application Security Experience- You will use OWASP's Top Ten vulnerabilities and other web app security tools to assess and enhance the security of web applications. - Code Review- You will be conducting in depth code reviews to identify and rectify vulnerabilities, coding best practices, and compliance with security standards. - Experience with Scanning Tools- You will use Veracode or similar scanning tools to detect and remediate security issues in application code. - DevSecOps and CI/CD Experience- You will collaborate with DevSecOps teams to seamlessly integrate security into the Continuous Integration/Continuous Deployment (CI/CD) pipeline, promoting automation and security as code. - Cloud Security Experience- You will use cloud platforms, such as Azure & AWS, and the latest cloud security practices to ensure the security of cloud-based applications and infrastructure.