Remote Application Security Lead

Summary

The Application Security Manager at Accurate Background is responsible for managing a team, integrating security into the system development lifecycle, conducting code scanning, and researching emerging threats. The role requires expertise in application development and security, knowledge of various computing systems, operating security tools, data analysis, and experience working in a highly outsourced environment.

Requirements

• High level of expertise in Application development and security acquired through educational qualifications in computer science, Cyber Security or related field and a minimum of 4 years of relevant experience
• Strong understanding of various computing systems including Cloud architecture (AWS/Azure/GCP)
• Detailed knowledge of operating security tools such as SAST, SCA and DAST and - supporting teams to use them in the most effective ways
• Strong working knowledge of various information technologies including user authentication, authorization pattern and components including knowledge of MFA mechanisms and configuration
• Data analysis, metrics development and reporting
• Experience with working in a highly outsourced environment (both infrastructure outsourcing and security operations outsourcing)

Responsibilities

• Manage and provide leadership to a team of security engineers
• Collaborate with Development & DevOps engineers to evaluate and operationalize security tools integrated in development environments
• Collaborate with product managers, scrum masters, and application development to identify and inject security requirements into Acceptance Criteria of epics/ stories
• Provide subject matter expertise on secure coding practice relating to SDLC, assist in building and rolling out related guidelines and standards
• Conduct code scanning, including Static Application Security Testing (SAST), Software Composition Analysis (SCA), Software Composition Scanning (SCS), Infrastructure as Code (IaC), Dynamic Application Security Testing (DAST) and perform manual source code reviews for high-risk components
• Research and monitor emerging threats and vulnerabilities, understand current industry and technology trends and opportunities, and assess their impact to applications and the business
• Drive Risk Management and Security Compliance within the AppSec environment
• Participate in a review board to address false positives and provide application security governance
• Create documentation for application security metrics, policies, procedures, standards, guidelines and training

Preferred Qualifications

• CISSP, ISO 27001, CASE or relevant certifications
• Demonstrated ability to take initiative and accountability for achieving results
• Effective communication skills with technical and non-technical staff

Benefits

• The annual base salary ranges from £60,700 - £91,150
• Pay will vary depending on job-related knowledge, skills, experience, and relevant education and training
• This position may also be eligible for an annual performance-based bonus, commission, or other variable pay plan
• The Company also offers a full range of benefits, including medical, dental, and 401k