data. Key Responsibilities: Perform security assessments and vulnerability scanning for web applications, APIs, and infrastructure. Collaborate with development teams to implement securecoding practices and address vulnerabilities. Review and advise on secure architecture and design for new and existing applications. Stay up to date with … application security, penetration testing, and secure software development practices. Strong understanding of security vulnerabilities (OWASP Top 10, etc.) and securecoding techniques. Experience with security tools (e.g., static/dynamic analysis tools, vulnerability scanners). Familiarity with common web technologies (e.g., Java, Python, JavaScript, SQL More ❯
teams, you'll implement security solutions for low-latency systems and multi-cloud platforms, including AWS, Azure, and Alibaba Cloud. You'll also secure hybrid infrastructures across Python, C++, and Kotlin/Java environments, ensuring robust protection that supports QRT's high-speed, data-driven operations. Support the … moving environment. Contribute to the development and maintenance of a secure software development lifecycle (SDLC) with a focus on securecoding practices in languages like Python, C++, Rust, Go and Kotlin/Java. Conduct threat modeling, vulnerability assessments and security code reviews across different platforms … in product security or similar roles with significant practical experience in securing software development at scale. Proven record of accomplishment in securecoding practices and development experience in development languages such as Python, C++, Rust, Go and Kotlin/Java. Strong technical background in software development, system More ❯
with strategic goals. Confidence navigating and integrating multiple systems. Other highly valued skills include: Expertise in software architecture, design patterns, and securecoding best practises. Hands-on experience with cloud platforms (AWS, Azure, or Google Cloud) and CI/CD pipelines. Proficiency in SQL/NoSQL databases … innovations and actively contribute to the organization's technology communities to foster a culture of technical excellence and growth. Adherence to securecoding practices to mitigate vulnerabilities, protect sensitive data, and ensure secure software solutions. Implementation of effective unit testing practices to ensure proper codeMore ❯
Bradford, Yorkshire, United Kingdom Hybrid / WFH Options
Freemans Grattan Holdings (fgh)
automation. Knowledge of scripting and automation languages such as Powershell, Bash. Familiarity with networking and security best practices. Knowledge of application securecoding principles (e.g., OWASP) for protection against vulnerabilities and the ability to implement securecoding and deployment best practices. Experience in Agile … balancer cache to enhance website performance. Desirable 3+ years in a B2C E-Commerce with a proven track record of implementing scalable and secure E-Commerce infrastructures. Knowledge of programming languages such as C#, Java, .NET. Knowledge of relational databases (e.g., MS SQL Server) and document-oriented databases More ❯
London, England, United Kingdom Hybrid / WFH Options
Cipher7
and tuning using memory and thread dump analysis. Work with databases including Oracle, PL/SQL, and MongoDB. Understand and implement securecoding practices in line with OWASP guidelines. Collaborate in a Kubernetes-based environment. Integrate with identity and access management platforms (e.g., ForgeRock). Handle Kafka … frontend tools. Experience with enterprise integration and microservices architecture. Familiarity with identity management, Kafka, Elastic Stack, and Kubernetes. Strong understanding of securecoding and performance tuning. Nice to Have: Prior experience in financial or enterprise-level environments. Exposure to Outside IR35 engagements. Knowledge of Agile/Scrum More ❯
code reviews: Reviewing code written by peers to ensure quality and security adhere to policy and best practice. Ensuring security and securecoding practices: Implementing and adhering to securecoding standards to protect applications from vulnerabilities and threats. Documenting processes and software: Creating and More ❯
code reviews: Reviewing code written by peers to ensure quality and security adhere to policy and best practice. Ensuring security and securecoding practices: Implementing and adhering to securecoding standards to protect applications from vulnerabilities and threats. Documenting processes and software: Creating and More ❯
Contribute to the production of clear and traceable design specifications for new or modified functionality Ensure all development complies with governance, securecoding practices, and design review procedures Report progress to the Software Lead and Software Engineering Delivery Manager, supporting team-level delivery goals SKILLS AND EXPERIENCE … Familiarity with Bitbucket Awareness of requirements development & traceability Awareness of software quality and static analysis tools, e.g., Coverity, SonarQube Understanding of securecoding standards and safety/security-critical development requirements for C++ Familiarity with SAST/DAST/SCA in a modern CyberSecurity conscious environment. Familiarity More ❯
Gloucestershire, United Kingdom Hybrid / WFH Options
SSR General & Management
role involves identifying and mitigating security risks throughout the product lifecycle, conducting risk assessments, and collaborating with development teams to integrate securecoding practices. Key Responsibilities: Conduct risk assessments, identify vulnerabilities, and implement mitigation measures. Integrate securecoding practices into the software development lifecycle. … Perform security code reviews and ensure secure-by-design principles. Conduct threat modelling exercises to identify and mitigate potential risks. Ensure compliance with security regulations such as ISO27001, NIST 800-30/37/53, JSP 440, 604, and Defence Standards. Develop and maintain security documentation (e.g., RMADS More ❯
Bristol, Kendleshire, Gloucestershire, United Kingdom Hybrid / WFH Options
SSR General & Management
role involves identifying and mitigating security risks throughout the product lifecycle, conducting risk assessments, and collaborating with development teams to integrate securecoding practices. Key Responsibilities: Conduct risk assessments, identify vulnerabilities, and implement mitigation measures. Integrate securecoding practices into the software development lifecycle. … Perform security code reviews and ensure secure-by-design principles. Conduct threat modelling exercises to identify and mitigate potential risks. Ensure compliance with security regulations such as ISO27001, NIST 800-30/37/53, JSP 440, 604, and Defence Standards. Develop and maintain security documentation (e.g., RMADS More ❯
London, England, United Kingdom Hybrid / WFH Options
SSR General & Management
role involves identifying and mitigating security risks throughout the product lifecycle, conducting risk assessments, and collaborating with development teams to integrate securecoding practices. The Role Key Responsibilities: Conduct risk assessments, identify vulnerabilities, and implement mitigation measures. Integrate securecoding practices into the software … development lifecycle. Perform security code reviews and ensure secure–by–design principles. Conduct threat modelling exercises to identify and mitigate potential risks. Ensure compliance with security regulations such as ISO27001, NIST 800–30/37/53, JSP 440, 604, and Defence Standards. Develop and maintain security documentation More ❯
role involves identifying and mitigating security risks throughout the product lifecycle, conducting risk assessments, and collaborating with development teams to integrate securecoding practices. The Role Key Responsibilities: Conduct risk assessments, identify vulnerabilities, and implement mitigation measures. Integrate securecoding practices into the software … development lifecycle. Perform security code reviews and ensure secure-by-design principles. Conduct threat modelling exercises to identify and mitigate potential risks. Ensure compliance with security regulations such as ISO27001, NIST 800-30/37/53, JSP 440, 604, and Defence Standards. Develop and maintain security documentation More ❯
key role in embedding security into modern software development practices. The role: You will work closely with engineering teams to promote securecoding, guide vulnerability remediation, and integrate Application Security controls within the DevOps pipeline. The focus is on cloud-native development in AWS environments. Key responsibilities … include: Embedding securecoding practices and supporting design/code reviews Implementing SAST, DAST, SCA, and other security checks into DevOps workflows Supporting secure API design and cloud-native architecture Serving as a key escalation point for vulnerability triage and remediation Providing developer enablement through … and threat modelling What you’ll bring: At least 3 years in application or product security roles Strong understanding of application-level threats, secure design, and remediation strategies Experience with Infrastructure as Code security (Terraform, CloudFormation), container security, and AWS Excellent communication skills and a collaborative approach #J More ❯
embedding security into the heart of modern software development practices. The role: You’ll work closely with engineering teams to champion securecoding, guide remediation of vulnerabilities, and integrate AppSec controls across the DevOps pipeline. This role is especially focused on cloud-native development in AWS environments. … Key responsibilities include: Embedding securecoding practices and supporting design/code reviews Implementing SAST, DAST, SCA, and other security checks into DevOps workflows Supporting secure API design and cloud-native architecture Acting as a key escalation point for vulnerability triage and remediation Delivering developer … and hands-on threat modelling What you’ll bring: 3+ years in application or product security roles Strong grasp of application-level threats, secure design, and remediation strategies Experience with IaC security (Terraform, CloudFormation), container security, and AWS Clear communication skills and a collaborative approach Seniority level Seniority More ❯
Slough, England, United Kingdom Hybrid / WFH Options
JR United Kingdom
Expiry Date: 15.07.2025 col-wide Job Description: Senior Product Security Engineer London/WFH to £160k Do you have expertise with securecoding practices and application security? You could be progressing your career in a senior, hands-on role at a global systematic trading firm. As a … platforms, ensuring security is embedded at every stage of the development lifecycle and provide mentorship, guidance and training on security best practices and securedevelopment processes to engineering teams working in mixed cloud and operating systems environments. Location/WFH: You'll join colleagues based in high spec … at the onsite restaurant, with flexibility to work from home two days a week. About you: You have strong experience with securecoding practices and development experience with development languages such as Python, C++, Rust, Go and Kotlin/Java You have a strong knowledge of software More ❯
London, England, United Kingdom Hybrid / WFH Options
Fab Lab ABQ
Senior Product Security Engineer London/WFH to £160k Do you have expertise with securecoding practices and application security? You could be progressing your career in a senior, hands-on role at a global systematic trading firm. As a Senior Product Security Engineer, you'll drive … platforms, ensuring security is embedded at every stage of the development lifecycle and provide mentorship, guidance, and training on security best practices and securedevelopment processes to engineering teams working in mixed cloud and operating systems environments. Location/WFH: You'll join colleagues based in high-spec … at the onsite restaurant, with flexibility to work from home two days a week. About you: You have strong experience with securecoding practices and development experience with development languages such as Python, C++, Rust, Go, and Kotlin/Java. You have a strong knowledge of software More ❯
What You’ll Be Working On: ️ Implementing securedevelopment practices and conducting threat modeling for software applications ️ Performing static and dynamic application security testing (SAST/DAST) to identify vulnerabilities in code ️ Collaborating with DevOps and development teams to integrate security into the CI/… CD pipeline ️ Conducting regular application security assessments, including penetration testing and vulnerability scanning ️ Providing guidance and training to development teams on securecoding practices and security tools What We’re Looking For: ️ Proven experience as an Application Security Specialist or in a similar application security role ️ Strong … knowledge of securecoding practices, common vulnerabilities (e.g., OWASP Top 10), and application security testing tools ️ Experience with SAST, DAST, and security code review tools (e.g., Fortify, Veracode, Checkmarx) ️ Familiarity with secure software development frameworks (e.g., OWASP, NIST) ️ Relevant certifications such as CSSLP, CEH, or More ❯
strategy and implement your ideas. Must have: 5+ years of experience in Cyber Security and IT Security, including web application security, securecoding techniques, secure system design and secure operations. A degree in Computer Science or equivalent. Existing (or ability to gain) Security … Clearance. Relevant certifications, such as CISSP, CISM, or CISA. Strong technical background as well as excellent communication and problem-solving skills. Understanding of Secure Software, a plus; Secure keys, Authentication processes, PKI, or X.509. This is a fresh opportunity to join a world-class organisation and More ❯
monday.com is looking for an application security expert to provide application security services including securecoding techniques and reviews, education & awareness, processes and tools, security testing support and guidance for internal software development projects. The Application Security Team is based in our headquarters, Tel Aviv, Israel - you … the architecture and development teams to review the design and code for security vulnerabilities. Embed/improve security threat modeling and securecoding in the development lifecycle. Provide technical specialist advice to ensure that security standards are understood and can be complied with. Monitor and proactively report … security vulnerabilities, testing techniques, and the OWASP framework. Team player able to build relationships across the organization, also remotely. In-depth understanding of secure web application development. Experience in web application and Agile development methodologies. Exposure to methods of promoting security awareness. Strong communication (verbal/written) and More ❯
coordinates the response to security incidents, including data breaches, system compromises, or attacks. Application Security Work with development teams to embed securecoding practices. Conduct regular security assessments of the company's software, including the proprietary products sold to clients. Provide security and data protection guidance to … coordinates the response to security incidents, including data breaches, system compromises, or attacks. Application Security Work with development teams to embed securecoding practices. Conduct regular security assessments of the company's software, including the proprietary products sold to clients. Collaboration & Communication: Provide security and data protection More ❯
s R&D Service Units are integral to supporting IFT (The Institute of Free Technology) projects by researching and developing base components and secure, unbiased protocols. The Vac Security service unit provides comprehensive support to IFT projects by conducting security audits and helping develop robust security plans. In … and lessons learned for continuous improvement. Collaborate with development and product teams to remediate identified vulnerabilities, provide security guidance, and ensure securecoding practices are followed. Define clear audit objectives and scope for external audits, focusing on the most critical components and protocols. Prepare and organise all … experience securing blockchain protocols, smart contracts, or cryptographic systems. Proficiency in low-level programming languages (Rust, Nim, C++). Expertise in securecoding practices, including identification of code/protocol-level vulnerabilities (e.g., buffer overflows, injection attacks) and code analysis/debugging. Experience with manual/automated More ❯
C# .NET Core + framework Experience with RESTful services, Web API, SOAP Knowledge of testing techniques; Unit Testing, Mocking, etc Good understanding of clean coding principles, securecoding, refactoring, and general programming best practices Familiarity with site/application security Preferred experience with Azure Cloud hosted More ❯
responsive HTML and CSS, JavaScript. Experience with RESTful services, Web API, SOAP. Knowledge of testing techniques; Unit Testing, Mocking, etc. Good understanding of clean coding principles, securecoding, refactoring, and general programming best practices. Familiarity with site/application security. Preferred experience with Azure Cloud hosted More ❯
Reading, England, United Kingdom Hybrid / WFH Options
Women in Tech UK
duties and responsibilities As a Senior Database Engineer, you'll play a key role in our database migration project, ensuring technical excellence in design, coding, and secure practices. Your responsibilities will include: Collaborating on system component design, software development, and testing Writing and documenting code changes, conducting … unit tests, and following securecoding standards Guiding architectural decisions and modeling migration solutions Creating detailed designs, including program specifications, data flows, and backup procedures Reviewing developer work and estimating project requirements Translating designs into technical solutions and defining system interfaces Contributing to coding standards and …/SQL Code Conversion (PL/SQL to PL/pgSQL) Data Migration (Oracle to PostgreSQL) PostgreSQL Performance Tuning Key Competencies: Development: Proficient in coding best practices, clean code principles, code reviews, and quality assurance Software Design: Skilled in defining system behavior based on requirements, ensuring robust component design More ❯
as Our Global Cybersecurity Expert! As a result of our continued growth, we're looking for an experienced cybersecurity professional passionate about building secure systems and fostering a culture of security. You'll take charge of our Cybersecurity function, ensuring our digital products and infrastructure are secure … become the norm. Your Mission As our Cybersecurity Lead, you will: Build and implement a DevSecOps framework to ensure our digital products are secure and meet the highest Cyber assurance standards. Lead the Cybersecurity function, managing people, processes, and tools while ensuring the business is "Secure … Cloud networking architecture: VNets, application gateways, private and service endpoints, and firewalls. Secure Software Development: Deep experience implementing effective securecoding practices (e.g., OWASP Top 10, SAST, DAST, SonarCloud). You can seamlessly integrate security into the SDLC with a shift-left approach. Cloud Security More ❯