Application Security Engineer (Junior to Senior level)

• Title: Application Security Engineer (Junior to Senior level)

  Ref: 27/11/ASE

   

  About Us

  At Allstate Northern Ireland, we believe it’s more than just a job.  We believe in allowing our people to choose the direction of their careers.  It’s about you, your future and where you want to get to.

  Opportunity is the hallmark of the Allstate career experience.  We invest heavily in our employees, offering long term career development, personal growth and investment in new technologies.  Every day is different, with new ideas, challenges, and rewards — no matter which team you join.

  We believe that inclusive diversity is crucial to creating a culture of mutual respect where the strengths and talents of each individual are recognised.  We like to leave things better than we found them and deliver results.  We do all of this while having fun and exploring personal passions.

  Join our team and you’ll find challenge and reward in a culture of innovation, support and balance.

   

  Location

  Belfast / Derry / Londonderry / Strabane

   

  Your role in the team

  Allstate is embarking on a journey to integrate security inside the software development lifecycle.

   

  Application Security is tasked with developing a security framework within the Allstate SDLC, establish a software security assurance process, and work with product delivery teams to build applications securely from start to finish.

   

  The Application Security Engineer team assist in integrating security into the development of Allstate’s applications.  As an Application Security Engineer, you will work closely with the product and software development team to threat model, vulnerability scan, and pen test the early software, system, and network architecture and identify required control points in the application stack.  The Application Security Engineer will also work closely with other developers to diagnose, document, and remediate application security vulnerabilities.

   

  • Work closely with application development and platform teams to implement software security that is tailored to the specific risks facing the organization, including threat modeling and applications security advisement services.
  • Conduct application security assessments / penetration tests and implement tools for dynamic/automated code reviews
  • Provide secure application development training to developers and provide guidance on the development of web-based training for ongoing awareness.
  • Conduct code reviews and penetration testing
  • Develop and maintain unit and integration tests designed to ensure security controls are tested on every build

   

  So, what are the essential criteria to apply?

  • All candidates must be able to demonstrate their right to work in the UK
  • Minimum of 2 years’ experience in a hands-on technical role within the Software Development Lifecyle such as an Application Security Engineer, Application Developer, Architect or Software Quality Assurance / Testing
  • Experience with at least one program language such as Java, .NET, Node.js, Go.
  • Have a hacker / pen tester mindset or an interest in security
  • Knowledge of DevOps or DevSecOps
  • Understanding of Agile/XP/Scrum/Kanban
  • Understanding of Continuous Integration/Testing/Delivery

   

  We also have some desirable criteria

  • Organized, responsive and highly thorough problem solver
  • Thorough knowledge of the OWASP Top 10
  • Practical understanding and use of commercial application security tools
  • Self-starter who has the ability to operate independently.
  • Oral/written presentation skills with ability to communicate development teams
  • Familiarity with Metasploit, Burp Suite, Fuzzing, Gauntlet, and Jenkins is preferred
  • College degree with advanced degree preferred.

   

  What we offer

  As Digital DNA’s Workplace of the Year 2020 winners, we offer a generous benefits package that includes flexible annual leave entitlement, dental and healthcare insurance, an attractive pension package and discounts on gym memberships, public transport and parking.

  Allstate invests heavily in your development, as an employee you will have access to multiple world-class learning platforms and courses from our award-winning in-house Learning & Development team.

  We pride ourselves in providing clear career paths and opportunities for internal mobility allowing you to further develop within the organisation.

  We encourage a better work life balance and you’ll have the opportunity to apply for various flexible working arrangements.

   

  Apply Here: https://bit.ly/2McvxRm 
  

   

  Statement on Fair Employment and Equal Opportunities

  Allstate NI wishes to ensure equal opportunity is given to all job applicants.  This company will not discriminate on the grounds of race, gender (including gender reassignment status), sexual orientation, religious belief, political opinion, marital status, age or disability.

  We are an equal opportunities employer. We welcome applications from all suitably qualified persons. However, as women are currently under-represented in our workforce, we would particularly welcome applications from women. All appointments will be made on merit.

  Applicants should note Allstate NI complete AccessNI background checks on all candidates offered a position.

   

  The closing date for receipt of applications is Friday 12th February 2021