Our consultancy client are currently looking for a couple of experienced Security/DevSecOps engineers to join their business. They operate in the FS and energy space so experience in banking or insurance or energy is a must for these roles.
Working across clients you will develop and execute advanced security engineering strategies to fortify infrastructure, networks, and cloud environments. Lead security initiatives across the SDLC, integrating Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and Container scanning using tools such as CheckmarxOne, Prisma Cloud, or equivalents. Collaborate with cross-functional teams to embed security-by-design principles in all engineering efforts and design and implement robust endpoint protection and cloud security solutions to defend against evolving threats. You will implement and monitor cloud configurations to align with compliance standards and best practices, focusing on proactive defense mechanisms and develop a comprehensive strategy for data protection (encryption, tokenization, masking) across the data lifecycle. Oversee security tool integration in CI/CD pipelines to automate vulnerability detection and resolution and conduct vulnerability assessments, network security audits, and code reviews to ensure application and infrastructure security.
Skillswise you will have strong knowledge of application security, secure coding practices, and tools like CheckmarxOne, Prisma Cloud, or similar platforms. With proficiency in SAST, DAST, SCA, and Container scanning, with hands-on experience integrating these tools into development pipelines. Extensive experience in endpoint security, cloud security, and network protection as well as being proficient in cloud platforms such as AWS, Azure, or GCP, with a strong focus on securing cloud architectures. A solid understanding of data security principles and mechanisms, including encryption and masking and familiarity with major security standards and frameworks (e.g., ISO 27001, NIST, OWASP). Any experience with programming languages like Python, Go, or Java would be a distinct advantage
