Application Security Engineer

Shieldpay City Of London, England, United Kingdom

Join or sign in to find your next job

Join to apply for the Application Security Engineer role at Shieldpay

Shieldpay City Of London, England, United Kingdom

3 days ago Be among the first 25 applicants

Join to apply for the Application Security Engineer role at Shieldpay

The opportunity

We are looking for an accomplished Application Security Engineer to join the Information Security team at Shieldpay. You will play a key role in upholding the security of Shieldpay's products, company systems, and people. The ideal candidate will take a security-first approach in everything they do.

Our global partners, and the regulatory bodies we answer to, trust us to ensure total security across all processes, whether that's in the processing of client monies or our internal security processes. You will be responsible for helping us achieve our mission of becoming the most trusted payment partner by ensuring our digital security.

Reporting into our Chief Information Security Officer, you'll work to make continuous security improvements across the organization. You will be key in designing and helping implement technical security architecture for new payment services, ensuring security is integrated into every step of the application lifecycle.

What You'll Be Doing

• Serving as the Application Security SME, providing technical expertise and guidance to engineers in the secure development of their products.
• Utilize SAST, DAST, and SCA within the development pipeline and collaborate with the engineering team to investigate, re-test, and resolve identified vulnerabilities.
• Conduct internal and external penetration testing and partner with external experts to proactively uncover potential security threats.
• Lead architectural reviews and threat modeling to embed security requirements into product designs.
• Own the secure software development lifecycle and represent application security in ISO 27001 audits, ensuring alignment and compliance with the standard.
• Contribute towards the broader company technical strategy, guiding it in a more secure direction from a development perspective.
• Regularly evaluate and report on the effectiveness of existing security controls as part of the RCSA process.
• Contribute to the wider security team and assist with incident response, monitoring, and routine security operations tasks.
• Work with the rest of the organization to build security into everyday functions, prioritizing a culture of security best practices.

What We're Looking For In You

• Proven experience in Application Security, Penetration Testing, or similar roles, especially within FinTech or payments.
• Experience with SAST, DAST, and SCA security tooling and the ability to interpret and address their findings.
• Familiarity with implementing ISO 27001 within software development environments.
• Proficiency in conducting penetration testing and vulnerability assessments, both manually and with automated tools.
• Knowledge of threat modeling and security architecture reviews to identify and mitigate risks in product designs.
• Solid understanding of software development methodologies and experience working with development teams to integrate security practices into the SDLC.
• Strong communication and collaboration skills to build effective relationships within your team and the wider business.
• Experience with AWS and GCP cloud security services, including WAF, API gateways, key management services, and secret managers.
• Certifications such as OSCP, OSWE, GPEN, GWAPT, GMOB, CRT, PenTest+ are desirable but not essential.

Our Promise

Shieldpay is an equal opportunities employer. We are committed to building a fair and transparent workforce that does not discriminate based on gender, sexual orientation, pregnancy or maternity, gender reassignment, race, ethnicity, religion, disability, or age. We offer flexible working options, including flexible hours and hybrid work, to support our employees' work-life balance.

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job function

• Information Technology

Industries

• Computer and Network Security

Referrals increase your chances of interviewing at Shieldpay by 2x.

Get notified about new Application Security Engineer jobs in City Of London, England, United Kingdom.

#J-18808-Ljbffr