Security Engineer (.NET Software Development)

• Embed security best practices throughout the software development lifecycle (SDLC).
  
• Conduct security reviews of application designs, architecture, and codebases.
  
• Identify, assess, and remediate application security vulnerabilities and risks.
  
• Perform secure code reviews for .NET applications and provide remediation guidance to development teams.
  
• Support the implementation of authentication, authorisation, encryption, and secure communication mechanisms.
  
• Configure and maintain application security tooling, including static and dynamic security testing solutions.
  
• Collaborate with development teams to address vulnerabilities identified through security assessments and penetration testing.
  
• Support threat modelling activities and security risk assessments for new and existing solutions.
  
• Develop and maintain security standards, guidelines, and secure coding practices.
  
• Assist with security incident investigation, root cause analysis, and remediation activities.
  
• Ensure solutions comply with security, privacy, governance, and regulatory requirements applicable to client environments.
  
• Contribute to security awareness and secure development knowledge sharing within engineering teams.
  

Requirements

• Languages & Frameworks: C#, ASP.NET Core, .NET Framework, EF Core, SQL, TypeScript, HTML/CSS, Python Flask, Python
  
• Application Security: Secure SDLC, threat modelling, secure code reviews, vulnerability management
  
• DevOps & CI/CD: Azure DevOps, Git, Docker, security scanning tools
  
• Cloud & Infrastructure: Microsoft Azure, Azure App Services, Azure Key Vault, Azure Storage, Virtual Machines
  
• Testing & QA: SonarQube, OWASP ZAP, Burp Suite, Postman, security testing frameworks
  
• Identity & Access Management: OAuth2, OpenID Connect, JWT, Microsoft Entra ID
  
• Security Standards: OWASP Top 10, CWE, CVSS, secure coding standards
  
• Monitoring & Logging: Microsoft Sentinel, Application Insights, Azure Monitor (advantageous)
  

• Strong understanding of application security principles and secure software design.
  
• Ability to identify security risks and communicate mitigation approaches effectively.
  
• Strong analytical and problem-solving skills.
  
• Ability to work collaboratively with development, architecture, infrastructure, and operational teams.
  
• Attention to detail and commitment to delivering secure, high-quality solutions.
  
• Strong written and verbal communication skills.
  
• Ability to balance security requirements with business and delivery objectives.
  

• Bachelor's degree in Computer Science, Information Security, Engineering, or a related field (advantageous), or equivalent practical experience.
  
• Relevant Microsoft Azure security certifications are advantageous.
  
• Industry-recognised security certifications such as Security+, SSCP, CEH, AZ-500, CSSLP, or equivalent are advantageous.
  

• 5+ years of experience in software engineering, application security, or secure solution delivery.
  
• Hands-on experience securing.NET and cloud-based applications.
  
• .NET vs Python Flask Experience
  
• Experience using security testing, code scanning, and vulnerability management tools.
  
• Experience working with Azure-based environments and DevSecOps practices.
  
• Understanding of regulatory, compliance, and governance requirements within enterprise environments.
  
• Experience supporting remediation activities arising from security assessments and penetration testing exercises.