Senior Application Security Engineer

This is us

At Avenga, we believe that human creativity empowers technology that matters. Operating globally, our 6000+ specialists provide a full spectrum of services, including business and tech advisory, enterprise solutions, CX, UX and Ul design, managed services, product development, and software development.

This Is You

• 7+ years in enterprise software development or engineering with 7 years of experience in an application security-focused role is required• In-depth knowledge of web application security and secure coding practices. Basic knowledge of network security, cloud security and cryptography• Experience with at least one JVM language (e.g. Java) and one more programming language (e.g. JavaScript, nodeJS, Python) as well as related frameworks such as Spring or J2EE• Experience in mobile application development or security.• Understanding of web, mobile and cloud applications and architectures, relational and non-relational databases, and containerization• Experience with at least one DAST, SAST and SCA security scanning tools configuration or automation• Experience with security reports reviews produced by security scanning tools.• Knowledge of application security frameworks such as OWASP, ASVS• Knowledge of Unix based OS or/and scripting (e.g. Bash, Shell)• Excellent communication skills in English (written and verbal)• Ability to lead online meetings• Organize and prioritize work effectively, able to adjust in a changing environment• A desire to learn new skills and develop your existing skillset• Ability to give and receive constructive feedback in a positive/professional manner• Enjoy working collaboratively• Mentoring and coaching of junior members of the teamNice to have:• Experience with any of Checkmarx products or GitHub automation• Experience leading triaging calls and process• Good experience with DAST or API scanning tooling and automation• Any threat modelling skills• Some knowledge of AWS would be a plus, but is not required• Familiarity with Jira, Confluence and Assets
• Computer Science Degree or equivalent (BSc or higher)

This is your role

The Security team which sits within the Information Security Department is seeking to hire a Cloud Security Engineer. As a Cloud Security Engineer, you will have the opportunity to build, and implement various company-wide security controls and technologies. Working closely with key business stakeholders (Engineering, Platform, Infrastructure) and members of the Security team. This hands-on technical role will be working on a range of security projects and activities. You will be directly influencing the security posture of many projects across the company to ensure that security plays a key part in everything we do.

We take pride in the diverse skills and character of our teams, welcoming everyone to apply and contribute to our collective strength.