About Company
Imagine a place where your expertise directly shapes the digital future, safeguarding innovations from evolving threats. Career.zycto champions pioneering solutions in software development and secure technology, working at the forefront of application integrity. We are a dynamic, forward-thinking entity dedicated to fostering a robust, secure digital ecosystem. For an App Security Engineer, this means unparalleled opportunities to embed security from conception to deployment, collaborate with brilliant minds, and significantly impact product resilience. Join us and contribute to building inherently secure applications that stand the test of time.
Job Description
We are seeking a highly skilled and proactive App Security Engineer to join our growing team. In this pivotal role, you will be instrumental in ensuring the security of our applications throughout their entire lifecycle, from design and development to deployment and ongoing maintenance. You will work closely with development teams, product managers, and operations to integrate security best practices, conduct thorough security assessments, and drive the remediation of vulnerabilities. This position offers a unique opportunity to shape our security posture, implement innovative security solutions, and foster a culture of security within our engineering organisation. If you are passionate about application security, possess a deep understanding of secure coding principles, and thrive in a collaborative environment, we encourage you to apply and help us build the next generation of secure applications. Your contributions will directly impact the trustworthiness and reliability of our products, protecting both our intellectual property and our users’ data. We are looking for an individual who is not just a problem-solver, but a visionary who can anticipate threats and architect robust defenses.
Key Responsibilities
- Perform security architecture reviews and threat modeling for new and existing applications.
- Conduct static and dynamic application security testing (SAST/DAST) and manual code reviews.
- Collaborate with development teams to identify, reproduce, and resolve security vulnerabilities.
- Design, implement, and maintain security controls and best practices throughout the SDLC.
- Develop and deliver security training and awareness programs for engineering staff.
- Evaluate and recommend security tools and technologies to enhance our security posture.
- Participate in security incident response and forensic analysis as needed.
- Stay current with the latest security threats, vulnerabilities, and industry best practices.
- Contribute to the continuous improvement of our security processes and policies.
Required Skills
- Proficiency in secure coding practices and common web application vulnerabilities (OWASP Top 10).
- Experience with SAST, DAST, IAST tools and penetration testing methodologies.
- Strong understanding of modern web frameworks, APIs, and cloud-native architectures.
- Familiarity with common programming languages such as Python, Java, C#, or JavaScript.
- Knowledge of cryptography, authentication, and authorization mechanisms.
- Excellent communication and interpersonal skills, with the ability to articulate complex security concepts to non-technical audiences.
- Problem-solving aptitude and a proactive approach to security challenges.
Preferred Qualifications
- Bachelor's or Master's degree in Computer Science, Cybersecurity, or a related technical field.
- Relevant security certifications (e.g., CISSP, OSCP, CEH, CSSLP).
- Experience with container security (Docker, Kubernetes) and serverless architectures.
- Background in security automation and scripting.
- Experience working in an Agile development environment.
Perks & Benefits
- Competitive salary and performance bonuses.
- Generous holiday allowance.
- Private medical insurance.
- Opportunities for professional development and training.
- Flexible working arrangements.
- State-of-the-art office facilities on Otley Road.
- Collaborative and inclusive company culture.
- Company pension scheme.
- Regular social events and team building activities.
How to Apply
Ready to fortify our applications against the ever-evolving threat landscape? Click the application link below to submit your resume and a cover letter detailing your experience and passion for application security. We look forward to reviewing your application and exploring how your skills can contribute to Career.zycto’s mission.
