Junior Software Security Engineer

Stelfox is partnering with a SaaS Product provider who deploy their B2B solutions across an international portfolio of financial services & Insurance organisation.

We are looking to add a Junior Application / Software Security Engineer to the team, in order to help safeguard applications and protect data from cyber threats. Ideally you will have a background in software development and security tooling.

Some of the tasks include:

• Work closely with software development teams to integrate security into the SDLC,
• Conduct security assessments and provide guidance on secure coding practices.
• Develop & implement security policies and procedures
• Perform penetration testing & vulnerability scanning.
• Stay up to date with the latest trends and threats.
• Work with third-party vendors to ensure security compliance.
• Conduct threat modelling and risk analysis.

Preferred experience & qualifications:

• Bachelor's degree or Masters in a IT Security / Cyber security related field
• 12-18 months experience in a commercial software engineering / security engineering or similar role where you are getting exposed to security tooling and/or DevSecOps.
• Good understanding of security principles.
• Exposure with security tools, like some of the following - Burp Suite, OWASP ZAP, and Nessus, Falco, Trivy
• Proficiency in programming languages / scripting such as Python, Typescript, Nodejs or others.
• Experience with incident response and forensic analysis is preferred
• Understanding of regulatory requirement is an advantage (GDPR, PCI-DSS etc).
• Certifications such as CISSP, CEH or OSCP are also an advantage.

We are open to considering both recent graduates from a specific security degree or masters course along with some internship or commercial experience of between 6-18 months. OR junior engineers who already have 1-2 years industry experience.

Feel free to apply if you would like to be considered for this opportunity above.

Note - visa sponsorship and relocation assistance is not on offer for this position.