Junior Information Security Engineer

Our prestigious Global Investment Bank client is seeking a highly motivated and enthusiastic Information Security Engineer to join its UK IT Security team. In this role, you will be instrumental in supporting the development and implementation of application security controls, automating security-related tasks, and enhancing our incident response capabilities.

The ideal candidate will have 1-3 years' experience, have good security exposure from the technical side with a focus on application security. Code reviews and scanning with a bit of knowledge in scriptwriting i.e. PowerShell, Python etc 

• Assist in the development and implementation of secure coding practices and guidelines to ensure the development of secure applications.
• Participate in application security testing, including vulnerability assessments and penetration testing, under the guidance of senior engineers.
• Collaborate with development teams to integrate security into the software development lifecycle (SDLC) and promote secure coding practices.
• Design and maintain automated workflows for efficient and effective application security testing.
• Produce detailed vulnerability reports and security recommendations using automated reporting and analysis tools.
• Apply application security best practices and secure coding guidelines to IT and IT Security projects.
• Monitor applications to ensure continuous compliance with technical security standards and application security standards.
• Support IT Security and cybersecurity awareness campaigns, focusing on application security best practices and secure coding guidelines.
• Maintain incident response plans and procedures for application security incidents.

• Working knowledge of Infrastructure and Application security, proxies, security vulnerabilities, and IS Security industry standards, policies, and best practices.
• Experience in scripting languages such as Python, Bash, or PowerShell, with a passion for automation to create efficiencies across Security operations.
• A modern, engineering-focused mindset with a logical problem-solving approach and ability to influence key business stakeholders.
• Excellent communication skills, comfortable communicating with different stakeholders, able to articulate complex technical concepts and collaborate effectively with various teams.
• Self-motivation, drive, proactivity, and commitment to continuous improvement and teamwork, with the ability to work independently and multi-task.

• Recent experience related to Application Security, Pen testing, Application Development, or a DevOps Internship/Apprenticeship.
• Understanding of application security concepts, including secure coding practices, threat modelling, vulnerability management, and access control mechanisms.
• Experience with CheckMarx or similar application security tools and API Security.
• Proficiency in programming languages such as Python.

• Competitive salary and benefits package.
• Opportunities for professional growth and development.
• Dynamic and supportive work environment.

To apply for the Information Security Engineer position, please submit your CV and cover letter detailing your relevant experience and why you are interested in this role.