Application Security Engineer - Infosum (Basingstoke, Hybrid: 2 days onsite)
Basingstoke, Hampshire, United Kingdom
Hybrid / WFH Options
Hybrid / WFH Options
InfoSum
We are seeking a skilled and proactive Cloud Security Engineer to conduct white-hat security testing on our SaaS-based application, which is deployed across multiple cloud providers. You will be responsible for identifying vulnerabilities, assessing risks, and helping us implement secure practices, including the integration of Trusted Execution Environments (TEEs) . Key Responsibilities: Perform white-hat (ethical) penetration testing on our cloud-hosted SaaS appliance. Identify and report vulnerabilities across application layers, APIs, and infrastructure. Collaborate with development teams (Go and Node.js) to remediate security issues. Evaluate and Test TEE solutions (e.g., AWS Nitro Enclaves, Azure Confidential Computing and Google Confidential Computing.). Conduct threat modeling and risk assessments. Develop and maintain security testing tools … and automation scripts. Stay current with emerging security threats, vulnerabilities, and mitigation techniques. Proven experience in penetration testing and ethical hacking. Strong understanding of cloud security (AWS, Azure, GCP). Familiarity with Go and Node.js application security. Experience with TEE technologies or confidential computing. Knowledge of OWASP Top 10, CVEs, and secure coding practices. Proficiency with tools like More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted: