Application Security Engineer – Manchester (3 days per week onsite)
We are Oliver James, a global recruitment & consulting group that has been introducing talented people to great organisations since 2002. As a business, we are achieving year-on-year growth of 30%, operate across 30 countries and open an average of 3 international offices a year, with no signs of slowing down! We put this track record down to our adaptability, allowing us to consistently outperform the market in the face of change; providing sustainability and reliability to our clients and people.
Global Operations at Oliver James is an integral part of the group. Based in Manchester, we provide the infrastructure, the innovation, the transformation and the scalable capabilities which have allowed us to become a £220 million turnover business.
We have an incredibly clear view of where we want to go and by when, exactly like our people. It is based on these very principles that we have achieved awards such as the Sunday Times Fast Track 100 and the Sunday Times International Track Recruiter100, to name a few.
We’re growing faster than we expected, and while that’s humbling it means that your career will develop quickly too, giving you the unique opportunity to say that you were “there at the beginning”!
We think we’re building something pretty special here at Oliver James Global Operations:
- We empower our team members to think big and we are built for those who thrive on delivering results; providing you the opportunity to seek the extraordinary and become your best, no matter your role or expertise.
- We breed a culture of excellence and inclusivity, a team that people are proud to work for; a place where people can thrive and make a difference.
All of our business functions support Oliver James’ wider goals and ambitions – to make a remarkable impact globally. So what’s stopping you, come and join us.
Overview
As an Application Security Engineer the focus of your role is to safeguard software applications from cyber threats by embedding security into every phase of the development lifecycle. You will bridge the gap between development and security teams, proactively identifying and mitigating vulnerabilities before software reaches production.
To perform this role well, we require:
1+ year in an Application/Security Engineer role (ideally in a fast-paced sales or professional services-based organisation). (AppSec / DevSecOps)
Key Technical Disciplines: Microsoft Azure, Programming Proficiency (JavaScript, Python, MS SQL, C#), Vulnerability Scanning, Penetration Testing, Continuous Integration and Continuous Deployment Pipelines (Azure DevOps or GitHub), OWASP Top 10, Static and Dynamic Application Security Testing, SQL Injection.
Personality metrics: A very strong communicator and proactive team player (friendly, credible, articulate, and proactive) that can work with an ambitious sales force and stakeholders of all levels.
An insight into some of your responsibilities:
- Define and implement security testing strategies for AI solutions, utilising both grey box and black box methodologies.
- Grey Box Testing: Conduct Static Application Security Testing (SAST), dependency scanning, secrets scanning, and configuration reviews.
- Black Box Testing: Perform Dynamic Application Security Testing (DAST), API fuzzing, authentication testing, and rate-limit tests.
- AI-Specific Security Tests: Execute prompt injection checks, jailbreaking resistance assessments, tool misuse evaluations, and leakage tests tailored for AI applications.
- Conduct thorough risk assessments of new and existing applications, identifying vulnerabilities and security gaps.
- Analyse and interpret security assessment findings, completing remediation efforts in code and verify fixes prior to production deployment.
- Collaborate with data engineering teams to implement security best practices and ensure secure coding standards.
- Stay current with emerging threats, vulnerabilities, and industry trends, integrating this knowledge into risk assessment processes.
- Provide technical guidance and support for incident response efforts related to application security incidents.
- Conduct quarterly application security reviews to evaluate and validate the effectiveness of security controls.
- Updating the ticket management system to maintain detailed record of incidents/requests.
- Security first mentality. Push cyber security standards within the IT team and to the wider group.
- Maintaining legacy software applications with bug fixes and critical security updates.
OJ Rewards
At Oliver James, we ask a lot of our employees, we are a high-performing and fast-paced business, which is why we give so much in return. In addition to your competitive salary.
