City of London, London, Coleman Street, United Kingdom
Deerfoot IT Resources Limited
uplift programme. Key Responsibilities: Update policies, procedures, and standards for Capacity Management, Event Management, Systems Monitoring, Disaster Recovery, Incident Management, and SecureCoding to align with existing traceability matrices. Collaborate with tooling developers to ensure all ICT resilience requirements are covered. Review and compare Regulatory Technical Standards … as prescribed in existing traceability matrices. Establish ICT processes for Capacity Management, Event Management, Systems Monitoring, Disaster Recovery, Incident Management, and SecureCoding, as described in DORA and supporting RTS. Complete impact assessments of DORA incident classification using historical incident data to model likely impacts. Transition to … sector. Knowledge and understanding of the EU DORA Act. Knowledge of ICT-related Capacity Management, Event Management, Incident Reporting, Disaster Recovery, SecureCoding, and Change Management processes and controls. Familiarity with EBA, PRA, ESMA regulations, and operational resilience regulatory requirements. Proficiency in ITIL and ServiceNow. In return more »
teams to inculcate security-by-design principles. Design and optimise endpoint protection solutions, ensuring robustness against evolving threats. Provide leadership in device management, secure configuration, and hardening practices. Secure our Cloud architectures, emphasising proactive defence mechanisms and robust access controls. Monitor cloud configurations, ensuring alignment with … masking strategies and implement a strategy for data protection across its lifecycle. Spearhead the integration of security within the SDLC, promoting securecoding practices and integrating security tools within CI/CD pipelines. Oversee designs, vulnerability assessments and code reviews, ensuring applications are free of critical security … flaws. Guide the engineering teams in embracing security as an integral part of the development lifecycle. Promote securecoding practices and integrate security tools within CI/CD pipelines. Conduct regular network security assessments and audits to identify and mitigate vulnerabilities. Monitor security access and implement firewall more »
threats and to identify threats, vulnerabilities, and control improvements. Support the stakeholders to enable informed decision making. Design, implement and improve securecoding related practices, processes and standards. Collaborate with development and operations teams to implement security controls and best practices in the development and deployment processes. … code and infrastructure, architecture, and configurations to ensure compliance with security standards. Provide expert advice and guidance to development teams on securecoding practices and potential security risks in DevSecOps community meetings. Enforce and monitor security compliance. Participate in design reviews to ensure security considerations are integrated … Python and TypeScript/Javascript that are the main programming languages used by the team. Experience on relational and NoSQL databases Experience on secure software development practices (e.g. OWASP Top 10, OWASP SAMM) Will be a plus: Security Certifications (e.g., CISM, CISSP) Cloud Certifications (e.g. AWS Solutions Architect more »
ensuring the security of applications that are built specifically for needs. These clients will need constant re-assurance of your ability to provide secure solutions and high level conversations will need to take place to ensure this. You will need to be able to communicate with a group … success for the organisation and their clients. Experience of auditing, code reviews and app testing to identify vulnerabilities Experience of implementing securecoding best practices into current codebases and development processes You must also have excellent written and verbal communication skills as you will be interacting internally … and externally to stakeholders. Passion to work with technologists to ensure securecoding and testing throughout the development life cycle Passion for strategic and proactive change to allow for upgrade to current security mechanisms. Experience of writing security tests As the Senior Application Security Engineer you will more »
refined skills and extensive technical knowledge to join the Information Security team on a 1-year fixed-term contract. The ideal candidate will secure KX's cloud environments and ensure security is seamlessly and effectively integrated with the secure software development life cycle (SSDLC). This … tools is paramount. Responsibilities Collaborate with development teams to integrate security best practices into our CI/CD pipelines. Design, implement, and maintain secure cloud … architectures on platforms such as AWS, Azure, and GCP. Provide guidance and support to development teams and client-facing developers on securecoding best practices. Conduct security assessments and vulnerability scans of cloud-based systems and applications and implement remediation measures. Develop and maintain security documentation including more »
closely with cross-functional teams to design, build, and implement new capabilities that enhance our service offerings. Design and develop robust, scalable, and secure applications using C# and/or Python. Leverage existing cloud-based technology to build and deploy applications that meet the needs of the card … development. Troubleshoot, debug, and upgrade existing systems, ensuring high performance and responsiveness to requests. Participate in code reviews, contributing to the maintenance of high coding standards and improving the overall quality of the codebase. Technical Skills and Experience Needed. Proven experience with cloud-based technology, and services, preferably within … AWS. Expertise in both Frontend and Backend software solution development Experience with Agile development methodologies and SecDevOps practices. Excellent knowledge of securecoding practices inline. Strong knowledge of databases, SQL, and NoSQL, as well as data structures and algorithms. Excellent problem-solving skills and the ability to more »
ensure we meet the needs of our business. What will you be doing? Helping in the design, development and implementation of a centralised secure, scalable and efficient IAM platform Assisting with the creation and maintenance of the technical roadmap for the evolution of the group wide IAM platform …/ForgeRock (product platform experience, system integration, , security features, extensions) Skills that will help you in the role: Experience in DevSecOps, securecoding best practices, defensive programming, security testing, data security, network security, cloud security, security compliance and regulations Infrastructure as Code, Ansible, Terraform and Containerisation, Docker more »
team focused on developing and maintaining Cloud Identity solutions. You will play a key role in designing, implementing, and scaling systems that enable secure and seamless user authentication across various platforms and applications. As a senior engineer you will collaborate closely with cross-functional teams to understand requirements … engineering with a focus on backend development. In-depth knowledge of GCP services, architecture, and best practices Proven experience in designing and building secure and scalable distributed systems. In-depth knowledge of identity management protocols (SAML, OIDC, OAuth) and their implementations. Experience … with Google Identity and containerization technologies (e.g., Docker, Kubernetes) is a plus. Strong understanding of security principles and best practices (e.g., securecoding, threat modeling). Excellent problem-solving and analytical skills. Ability to work effectively in a fast-paced, collaborative environment. Excellent written and verbal communication more »
side web technologies (HTML, CSS, Javascript) Java web development Database development – Oracle, MsSQL SQL query language Object oriented design and developmentSecurecoding principles and best practice Technical desirable: Groovy and Grails AngularJS , ReactJs, VueJs PhP, NodeJs Spring Java Hibernate, JDBC RabbitMQ Experience of containers (like docker more »
seeking a talented and experienced DevSecOps Specialist to join our team. The DevSecOps Specialist will play a crucial role in implementing and maintaining secure and efficient DevSecOps practices across our organization. The successful candidate will collaborate with cross-functional teams to automate and streamline our software development and … on cloud platforms such as AWS, Azure, or Google Cloud Platform. Security and Compliance: Implement security best practices and standards, including securecoding practices, vulnerability management, and identity and access management (IAM). Conduct security assessments and audits to identify and remediate security vulnerabilities and compliance issues. more »
into the CI/CD pipeline and automate security testing and compliance checks. Provide guidance and support to development teams on securecoding practices and threat modelling techniques. Collaborate with cloud architects to design and implement secure cloud environments. To be considered for this role more »
dedicated Value Stream outcomes (supporting all functional and non-functional requirements for all APIs for each VS outcome) Deliver reliable robust resilient and secure software solutions meeting strict operational specifications on a timely basis Define application data and resource model such that the operations and relationships between resources … computing, and scalable system architecture. Experience with containerization and orchestration tools (e.g., Docker, Kubernetes). Familiarity with Agile and DevSecOps methodologies, SecureCoding practise Expertise with Cloud Technologies (Azure) Knowledge or experience in Azure APIM Excellent communication, leadership, and project management skills. Strong analytical, design and problem more »
application security policies and web application firewalls. F5 with API Gateway: Experience : Integrating F5 solutions with API Gateway technologies, demonstrating the ability to secure and manage APIs effectively. Experience in using F5 with Kong API Gateway; managing, and optimizing API traffic through F5 systems. F5 GTM and Proxy … and infrastructure Security Practices in DevOps (DevSecOps): Understanding of security practices in a DevOps environment. Familiarity with security scanning tools, implementing securecoding practices, and ensuring compliance with industry standards Networking and Security Fundamentals: Knowledge of networking concepts (e.g., TCP/IP, DNS, HTTP/S) and more »
Previous developer role experience & proficiency in scripting languages, working with Azure Devops stack. SAST/DAST/CI/CD/OWASP/Secure coding. Manage workshops and training sessions across business units. CISSP/CISM/CSSLP. more »
measures within our clients AWS cloud environment, in addition to driving the development and operations teams to ensure our clients cloud infrastructure is secure, resilient, and compliant with industry standards. This role requires deep technical expertise in AWS in addition to a proactive approach to identifying and mitigating … DevOps and development teams to integrate security best practices into CI/CD pipelines and cloud-native applications. Provide guidance on securecoding and architecture. Develop and maintain automated security processes and scripts using tools such as AWS Lambda, AWS CloudFormation, and Terraform to ensure continuous security more »
CD) Maintain a dashboard of security enhancements and work closely with the Product Managers to ensure this work is scheduled Improve and maintain securedevelopment standards Support the incident response and architecture review processes whenever application security expertise is required Manage application framework and perimeter security improvement projects … in a Product or Application Security role Industry certifications such as CISSP, CISM, and CISA, are highly advantageous Solid understanding of securecoding principles Experience working with cloud-based applications and services Familiarity with a variety of software development & automation tools Strong critical thinking and problem-solving more »
e.g., DAST, penetration testing) with a proven track record of driving remediation efforts. - A solid grasp of the OWASP framework and securecoding practices, coupled with experience in championing them within development teams. If keen please apply more »
for remediation, security vulnerabilities in their IT infrastructure and applications. Key responsibilities: - Web Application Penetration Testing - Bespoke Thick Client Penetration Testing - Documentation - Automation - SecureCode Review - Security Tooling in CI/CD PLEASE REACH OUT IF THIS IS A ROLE THAT YOU MIGHT BE INTERESTED IN Application Security more »
Master the art of penetration testing with tools like Burp Suite, OWASP ZAP, and/or Kali Linux. Have experience with securecoding practices, threat modeling, and API security. Are a skilled communicator and collaborator, able to bridge the gap between technical and non-technical audiences. Senior more »
hybrid cloud infrastructureContainerisation experience with Docker or KubernetesExperience in security-related responsibilities, including familiarity with network security, data encryption, and best practices in secure coding.Prior work experience in industries such as financial services or other sectors with a strong emphasis on security and high-risk considerationsDevOps EngineerLocation: London more »
/engineering and champion security within your current role, you're very likely to be successful. You will be training developers on writing securecode, perform threat modelling and security testing of applications, run SAST, DAST, SCA and secret scanning tools, manage the bug bounty program and lead more »
the whole software development lifecycle. In addition to this we also work to ensure our engineering teams are trained to create safe and securecode as well as remaining compliant with any regulatory requirementsHow we workWe operate on a strong belief in automation, programmatic implementation, and reusable design. more »
their integration into the development process. Collaborate with other teams, such as smart contract developers and blockchain architects, to ensure a seamless and secure decentralized user experience. Requirements Bachelor s degree in computer science, engineering, or a related field. 5 years of experience in full stack development, with … NextJS, React Native, Graphql, Serverless platforms) and a strong understanding of blockchain and decentralized technologies. Proven track record of writing clean, efficient, and securecode across multiple technologies, including familiarity with Solidity for smart contract development. Knowledge of blockchain platforms and protocols, such as NEAR, Ethereum, or Solana. more »
to work on some super exciting projects, then please apply! Main responsibilities: Integrate security tools and processes into the DevOps pipeline to ensure securecode deployment and infrastructure management. Design and implement automated security testing, including static code analysis, dynamic application security testing, and vulnerability scanning. Collaborate with … environments in AWS and Azure, ensuring compliance with best practices and industry standards. Develop and maintain security policies, procedures, and documentation to support secure DevOps practices. Monitor security metrics and logs to detect and respond to security incidents. Lead and participate in security incident response activities, including root more »
