{"id":2006,"date":"2020-12-22T16:08:25","date_gmt":"2020-12-22T16:08:25","guid":{"rendered":"https:\/\/trilatycyber.com\/?post_type=job_listing&#038;p=2006"},"modified":"2020-12-22T16:08:25","modified_gmt":"2020-12-22T16:08:25","slug":"application-security-engineer","status":"publish","type":"job_listing","link":"https:\/\/trilatycyber.com\/vacancies\/application-security-engineer\/","title":{"rendered":"Application Security Engineer"},"content":{"rendered":"<p><strong>Role overview:<\/strong><strong>\u00a0<\/strong><\/p>\n<p>Working for a security vendor, the Security team are accountable for the company\u2019s Information Security, Security Architecture, Security Compliance, Security Awareness, Security Operations and Information Security Risk Management Activities.\u00a0 You&#8217;ll work closely with development and operational teams to design, implement\/recommend application security controls.<\/p>\n<p>This is a new role for the company requiring a passion for cyber security and a hands-on development background to create and develop the application security capabilities as part of the SDLC. Ideally you will have a background in software development.<\/p>\n<p><strong>Main tasks and responsibilities:<\/strong><\/p>\n<ul>\n<li>Assess and identify gaps in current application security controls and provide guidance to resolve and remediate based on risk to the business<\/li>\n<li>Working with the DevOps teams, establish and design processes to improve the secure development of products and services during the SDLC<\/li>\n<li>Provide guidance and support during development and rollout of new product features by understanding their requirements and model\/evaluate likely threat vectors<\/li>\n<li>Provide security expertise and guidance to the Development Teams<\/li>\n<li>Promote a security-focused culture as part of the SDLC, educating DevOps teams in security best practices<\/li>\n<li>Conduct\/Lead threat modelling and security design activities alongside Dev\/Engineering Teams<\/li>\n<li>Work with 3rd parties to support vulnerability and penetration testing<\/li>\n<li>Process reports from external penetration testing vendors and coordinate feedback with teams to ensure actions are followed to mitigate identified risks<\/li>\n<\/ul>\n<p><strong>Skills:<\/strong><\/p>\n<ul>\n<li>Software engineering background is a must with knowledge of Application Security Frameworks e.g. OWASP SAMM\/DSOMM etc<\/li>\n<li>Hands-on knowledge of information security processes such as security design review, threat modelling, OWASP Top 10, risk analysis, and software testing techniques<\/li>\n<li>Strong understanding of application security awareness, including the security of web applications<\/li>\n<li>Experience with risk management activities &#8211; identifying, assessing and providing remediation options for application and technology risks<\/li>\n<li>Knowledge of Agile methodologies is a must<\/li>\n<li>Knowledge of backend and frontend web application vulnerabilities<\/li>\n<li>Knowledge of OWASP Top 10, SANS Top 25 etc<\/li>\n<li>Experience working in AWS\/Azure\/GCP would be beneficial<\/li>\n<li>Knowledge of Ci\/CD pipelines<\/li>\n<li>Thorough understanding of SAST, DAST (including fuzzing), endpoint and perimeter scanning etc.<\/li>\n<li>Familiarity with industry security standards (ISO27001, NIST, CCM etc)<\/li>\n<li>Network and infrastructure experience.<\/li>\n<li>API gateway security, WAF and IDS, SSO, SAML etc<\/li>\n<li>At least one professional security certification e.g. CISSP, CEH, GCIH, GCFA , CSSLP etc or working towards<\/li>\n<\/ul>\n<p><strong>Pre-requisites:<\/strong><\/p>\n<ul>\n<li>Excellent analytical skills with the ability to see the bigger picture<\/li>\n<li>Excellent communication skills with the ability to influence multiple stakeholders<\/li>\n<li>Ability to self-motivate and define priorities to meet deadlines<\/li>\n<li>Good team-oriented interpersonal skills, with the ability to interface effectively with a broad range of people and roles<\/li>\n<li>Ability to effectively present and communicate security threats and risks to any audience and impress upon them the mitigation techniques and strategies<\/li>\n<\/ul>\n<p><strong>Further info:<\/strong><\/p>\n<ul>\n<li>Competitive salary &amp; flex bens<\/li>\n<li>Flexible locations \/ remote<\/li>\n<\/ul>\n<p><strong>To apply:<\/strong><\/p>\n<p>Please either register your CV and complete the information fields requested or send your CV to vacancies@trilatycyber.com referencing WDA152 and your current salary<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"author":4,"featured_media":0,"template":"","meta":{"_job_location":"Flexible locations","_application":"vacancies@trilatycyber.com","_company_name":"","_company_website":"","_company_tagline":"","_company_twitter":"","_company_video":"","_filled":0,"_featured":0,"_remote_position":0,"_job_salary":"","_job_salary_currency":"","_job_salary_unit":""},"job-types":[],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v19.7.1 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Application Security Engineer - Trilaty Cyber<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/trilatycyber.com\/vacancies\/application-security-engineer\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Application Security Engineer - Trilaty Cyber\" \/>\n<meta property=\"og:description\" content=\"Role overview:\u00a0 Working for a security vendor, the Security team are accountable for the company\u2019s Information Security, Security Architecture, Security Compliance, Security Awareness, Security Operations and [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/trilatycyber.com\/vacancies\/application-security-engineer\/\" \/>\n<meta property=\"og:site_name\" content=\"Trilaty Cyber\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/trilatycyber.com\/vacancies\/application-security-engineer\/\",\"url\":\"https:\/\/trilatycyber.com\/vacancies\/application-security-engineer\/\",\"name\":\"Application Security Engineer - Trilaty Cyber\",\"isPartOf\":{\"@id\":\"https:\/\/trilatycyber.com\/#website\"},\"datePublished\":\"2020-12-22T16:08:25+00:00\",\"dateModified\":\"2020-12-22T16:08:25+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/trilatycyber.com\/vacancies\/application-security-engineer\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/trilatycyber.com\/vacancies\/application-security-engineer\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/trilatycyber.com\/vacancies\/application-security-engineer\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/trilatycyber.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Application Security Engineer\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/trilatycyber.com\/#website\",\"url\":\"https:\/\/trilatycyber.com\/\",\"name\":\"Trilaty Cyber\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/trilatycyber.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-GB\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Application Security Engineer - Trilaty Cyber","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/trilatycyber.com\/vacancies\/application-security-engineer\/","og_locale":"en_GB","og_type":"article","og_title":"Application Security Engineer - Trilaty Cyber","og_description":"Role overview:\u00a0 Working for a security vendor, the Security team are accountable for the company\u2019s Information Security, Security Architecture, Security Compliance, Security Awareness, Security Operations and [&hellip;]","og_url":"https:\/\/trilatycyber.com\/vacancies\/application-security-engineer\/","og_site_name":"Trilaty Cyber","twitter_card":"summary_large_image","twitter_misc":{"Estimated reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/trilatycyber.com\/vacancies\/application-security-engineer\/","url":"https:\/\/trilatycyber.com\/vacancies\/application-security-engineer\/","name":"Application Security Engineer - Trilaty Cyber","isPartOf":{"@id":"https:\/\/trilatycyber.com\/#website"},"datePublished":"2020-12-22T16:08:25+00:00","dateModified":"2020-12-22T16:08:25+00:00","breadcrumb":{"@id":"https:\/\/trilatycyber.com\/vacancies\/application-security-engineer\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/trilatycyber.com\/vacancies\/application-security-engineer\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/trilatycyber.com\/vacancies\/application-security-engineer\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/trilatycyber.com\/"},{"@type":"ListItem","position":2,"name":"Application Security Engineer"}]},{"@type":"WebSite","@id":"https:\/\/trilatycyber.com\/#website","url":"https:\/\/trilatycyber.com\/","name":"Trilaty Cyber","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/trilatycyber.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-GB"}]}},"_links":{"self":[{"href":"https:\/\/trilatycyber.com\/wp-json\/wp\/v2\/job-listings\/2006"}],"collection":[{"href":"https:\/\/trilatycyber.com\/wp-json\/wp\/v2\/job-listings"}],"about":[{"href":"https:\/\/trilatycyber.com\/wp-json\/wp\/v2\/types\/job_listing"}],"author":[{"embeddable":true,"href":"https:\/\/trilatycyber.com\/wp-json\/wp\/v2\/users\/4"}],"wp:attachment":[{"href":"https:\/\/trilatycyber.com\/wp-json\/wp\/v2\/media?parent=2006"}],"wp:term":[{"taxonomy":"job_listing_type","embeddable":true,"href":"https:\/\/trilatycyber.com\/wp-json\/wp\/v2\/job-types?post=2006"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}