Application Security Engineer

b Overview /b p In this role you protect Shawbrook’s software applications and digital assets by applying the latest security practices. You’ll perform code reviews, practical testing, and threat mitigation across cloud-native and containerized environments. You work with DevSecOps to embed security into CI/CD, leverage modern tools, and stay ahead of evolving cyber threats. This is an opportunity to grow technically while shaping secure, scalable software in a fast-paced, innovative bank. /p b Pay / Benefits /b ul li Market leading family friendly policies /li li Free Headspace and Peppy apps /li li EAP – Employee Assistance Programme /li li Cycle to work scheme /li li Gym membership discounts /li li Contributory pension scheme death in service /li /ul b Responsibilities /b ul li Conduct thorough code reviews to improve security and compliance /li li Perform advanced penetration testing and vulnerability assessments /li li Utilize Qualys and other patch management tools for up-to-date security /li li Deploy Veracode and similar tools to remediate code security issues /li li Collaborate with DevSecOps teams to automate security in the CI/CD pipeline /li li Harness Azure and cloud security practices for secure cloud applications /li li Apply OWASP Top Ten knowledge to enhance web app security /li li Stay updated on AI/ML for security threat prevention /li li Secure containerized apps with Docker and Kubernetes /li li Secure APIs using modern security mechanisms and protocols /li /ul b Key requirements /b ul li Web Application Security Experience using OWASP Top Ten and related tools /li li Code Review experience identifying vulnerabilities and ensuring security standards /li li Experience with scanning tools like Veracode or similar /li li DevSecOps and CI/CD collaboration to integrate security into pipelines /li li Cloud security experience with Azure and AWS /li /ul ul li OWASP Top Ten /li li Veracode /li li Qualys /li li Docker /li li Kubernetes /li li Azure /li /ul