Application Security Team Leader

Job Description

We are seeking a highly motivated and experienced Application Security Team Leader to lead our dynamic and growing Application Security team. This exciting opportunity is perfect for an existing Application Security Team Leader or an ambitious ApplicationSecurity Engineer looking to take the next step in their career.What does the job involveAs our Application Security Team Leader, you will play a critical role in enhancing the security of the software we develop in-house and ensuring we implement third-party solutions securely.You will collaborate with Architects, Platform Engineering, Information Security, and agile development teams to make code and process changes that continuously improve the security of our software while fostering a collaborative relationship between developersand security professionals. Your leadership will be crucial in guiding the growth and success of the team.Responsibilities

• Leading and managing the growing Application Security team, ensuring alignment with the team objectives.
• Overseeing application security testing, prioritising the resolution of security vulnerabilities, and increasing automation.
• Collaborating with agile development teams to:
  • Further shift-left application security, embedding security tooling (static analysis, SCA, and container scanning) into their CI/CD pipelines and IDEs.
  • Develop and implement fixes to the vulnerabilities identified.
• Collaborating with Information Security, Architects and Platform Engineering to define security standards, implement threat modelling across all high-risk services, and bring third-party applications into scope.

Technical skillsEssential:

• Performing manual application security testing e.g., using Burp Suite.
• Using and embedding security tooling (static analysis, SCA, and container scanning) within CI/CD pipelines and IDEs.
• Developing services and APIs with C# or Java
• Web development with Angular/React/VueJs.
• Secure development practices.
• Using a git-based source control system.

Desirable:

• PHP MVC (Zend or Laravel or Symfony)
• Docker and container orchestration tools
• Event-driven Microservices
• Developing and securing solutions on AWS

Competence, knowledge, and skillsEssential:

• Experience working in an Agile and DevOps environment
• Excellent communication and documentation skills
• Planning, organization, and time management skills
• Strong analytical and problem-solving skills
• Proven team leadership and/or mentoring
• Ability to foster collaborative relationships with developers

Desirable:

• Educated to degree level
• Professional security qualifications
• AWS Certified Security - Specialty (or other AWS qualifications)
• Previous experience working in an e-commerce and/or financial services business

About us:AJ Bell is one of the fastest-growing investment platform businesses in the UK offering an award-winning range of solutions that caters for everyone, from professional financial advisers, to DIY investors with little to no experience. We have over 449,000customers using our award-winning platform propositions to manage assets totalling more than £71.5 billion. Our customers trust us with their investments, and by continuously striving to make investing easier, we aim to help even more people take control oftheir financial futures.Having listed on the Main Market of the London Stock Exchange in December 2018, AJ Bell is now a FTSE 250 company.Headquartered in Manchester with offices in central London and Bristol, we now have over 1200 employees and have been named one of the Sunday Times 100 Best Companies to Work For for five consecutive years.There are opportunities for growth and professional development for employees wanting to progress within their career including induction training and our study support scheme which is part of our benefits package.There is an active programme of social events throughout the year, which are open to all employees.In return we will provide all the training and support you need in order to develop within your role.What we offer:

• Competitive starting salary
• Generous holiday allowance of 25 days, increasing up to 30 days with service, plus bank holidays
• Holiday buy/sell scheme
• Hybrid working policy
• Casual dress code
• Discretionary bi-annual bonus
• Contributory pension scheme
• Buy as you earn share scheme
• Free shares scheme
• Paid study support for qualifications
• Enhanced maternity/paternity scheme from day one
• Bike loan
• Season ticket loan portal
• Discounted PMI and Dental
• On-site gym and personal trainer led classes
• Paid volunteering opportunities
• Free social events and more

AJ Bell is committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants and all employees are empowered to bring their whole self to work.We do not discriminate on the basis of race, sex, gender identity, sexual orientation, age, pregnancy, religion, physical and mental disability, marital status and any other characteristics protected by the Equality Act 2010. All decisions to hire are basedon qualifications, merit and business need.