Job Description
What you’ll do
Collaborate with the DevOps team to design, implement, and manage a robust DevSecOps framework for our software development pipeline, integrating security tools and processes into our CI/CD workflows to enhance the developer experience
Champion a security-first mindset within the development team, promoting secure coding practices and providing guidance on secure development methodologies
Create security focused DevSecOps policies and standards and provide training and awareness to the development team
Develop Key Risk Indicators (KRIs) to track security posture across business lines, measure progress and identify outliers
Implement and manage security testing tools and processes within the CI/CD pipeline, including static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), and open source security (OSS)
Work together with the DevOps team to automate security controls and compliance checks within the development pipeline, ensuring adherence to industry best practices and regulatory requirements
Troubleshoot and resolve security issues throughout the software development lifecycle
Stay abreast of emerging security threats, vulnerabilities, and DevSecOps best practices to continuously improve our security posture
Collaborate with the DevOps team to design, implement, and manage a robust DevSecOps framework for our software development pipeline, integrating security tools and processes into our CI/CD workflows to enhance the developer experience
Champion a security-first mindset within the development team, promoting secure coding practices and providing guidance on secure development methodologies
Create security focused DevSecOps policies and standards and provide training and awareness to the development team
Develop Key Risk Indicators (KRIs) to track security posture across business lines, measure progress and identify outliers
Implement and manage security testing tools and processes within the CI/CD pipeline, including static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), and open source security (OSS)
Work together with the DevOps team to automate security controls and compliance checks within the development pipeline, ensuring adherence to industry best practices and regulatory requirements
Troubleshoot and resolve security issues throughout the software development lifecycle
Stay abreast of emerging security threats, vulnerabilities, and DevSecOps best practices to continuously improve our security posture
💡 Quick Summary
Seeking a career-building opportunity? The Lead Application Security Engineer position is now open for candidates interested in the IT Engineer & Developer Jobs sector. This role in London offers a professional environment and growth potential.
Requirement Snapshot: Candidates should possess basic communication skills, a proactive attitude, and the ability to work in a team. Experience in IT Engineer & Developer Jobs is a plus.
