Application Security Engineer

Methodia is a leading IT product-driven company focused on developing bespoke end-to-end solutions for Utilities, Telecoms and other household-related service suppliers. For nearly a decade our highly innovative home-grown “Utility & Telecom Suite” product and tools enable companies all over the globe to successfully optimize and automate their business processes, and helps them boost their digital transformation and competitive agility to reach success.

We are looking for an Application Security Engineer who will be responsible for the proper implementation and configuration of security measures and controls to protect a company’s applications — such as authentication, encryption, and authorization — and testing applications to ensure they are free from security loopholes.

Required experience:

• Minimum 5 years of professional experience in software development or/and application security
• Working in a team following standard support processes and methodologies
• Technical degree (Computer science, Engineering or relevant)

Expertise:

• In-depth understanding and experience with Software Security Development Lifecycle
• Understanding of how common communication and security protocols operate (DNS, TCP, IP, HTTP, SMTP, HTTPS, SSL)
• Good understanding of Java programming language
• Familiarity with security frameworks and standards (OWASP Top 10, MITRE ATT&CK)
• Profound experience with SAST and DAST tools
• Experience with the implementation of security management standards is a plus (ISO 27001, SOC 2)

Responsibilities:

• Understand the architecture of the company’s products, identifying potential attack vectors
• Provide guidance to developers on secure coding practices
• Participate in code and design reviews to identify potential security vulnerabilities and advise on remediation strategies
• Conduct security reviews on both new features and changes
• Execute manual and automated vulnerability scans and security tests
• Analyses discovered vulnerabilities and information on new threats to prioritize them and develop mitigation plans
• Take active part in case of security related incidents, working closely with Methodia’s Incident Response team to mitigate the impact of the incident
• Work closely with dev, DevOps and operations teams to ensure that security is considered through the whole software development lifecycle, not just as a last step in it
• Act as backend Software Developer (Java/NodeJS)

Go ahead and send us your CV!

Only shortlisted candidates will be contacted for an interview. All applicants’ personal data is protected by the law and will be treated as strictly confidential.