SGI
23 окт

Application security engineer in financial services

ориентир по рынку
вакансия зп не указана
в среднем 353 643 ₽
Загрузи резюме, чтобы видеть мэтчи с вакансиейЗагрузи резюме, чтобы видеть мэтч с вакой

подготовься к отклику

ai-инструменты

Чтобы адаптировать резюме под вакансию или составить сопроводительное письмо, загрузи резюме

описание

Oour clients a global Tier 1 investment bank are looking for an experienced Application Security Engineer who has prior experinece in Software Engineering and is familiar with the Software Development Lifecycle practices.

задачи

  • Work as part of a team of software and security engineers to design/maintain and build best-in-class product security tools and services.
  • Technical point of contact for product teams as it relates to automation, CI/CD, and Product Application Security Operations
  • Using approved AI models and cyber harnesses to assess application code for business logic weaknesses, misconfiguration and vulnerabilities.
  • Build tools and automation scripts that enable developers to easily consume security services delivered by Security Engineering and Automation team
  • Responsible for security product QA and Testing
  • Build strong relationships with product development teams
  • Run software composition analysis (SCA) tools
  • To understand and explain penetration testing findings to the software engineering teams helping them to triage the findings and explaining how to mitigate the risks
  • To articulate business risk when assessing software vulnerabilities
  • Continuously improve the operations of SAST, DAST and IaC security tools
  • Continuously improve the operations of Web Application Firewalls (WAF) or IDS
  • Continuously improve the coverage of security tooling in Cloud environments e.g. Microsoft Azure & Amazon AWS

требования

  • Application Development background
  • Experience in Application or Product Security
  • Prior experience in using AI models and cyber harnesses to support security evaluation of application and software code.
  • GitHub, Copilot, Codex, OWASP Top 10 for Agentic AI, AI skills development and security triage.
  • Ability to code in at least one programming language e.g. Python/JavaScript/CSharp/Powershell
  • Excellent analytical skills with attention to details
  • CISSP/CSSLP/CEH/OSCP or similar certification
  • Team-player interpersonal skills, with the ability to communicate and collaborate effectively with different people in a variety of roles
  • Passionate about developing a career in Information Security
  • Computer Science / Cyber Security Degree
  • Excellent command of the English language, both written and spoken
  • Passionate about mastering and innovating best practice in business analysis
  • Inspiring and collaborative leader, model of agile leadership approach
  • Friendly, approachable, enjoys working with people from a variety of backgrounds
  • Capable of remaining positive when under pressure
  • Continuous improvement mind-set, challenges the status quo and seeks self improvement
  • Problem solver, comfortable taking the initiative in challenging and ambiguous circumstances
  • Будет плюсом: Prior experience working in a large organisation or Financial Services is an advantage as well as in Software Engineering

условия

  • Условий в вакансии нет

Если просят выйти из iCloud, прислать код из SMS, запустить или установить что-то, перевести деньги — не соглашайся: это мошенничество.

Если просят выйти из iCloud, прислать код из SMS, запустить или установить что-то, перевести деньги — не соглашайся: это мошенничество.