Security Engineer - Application Security

Security Engineer - Application Security

Join to apply for the Security Engineer - Application Security role at Tesco Technology

An exciting opportunity to join a leading company and play an influential part in their continued dedication to Application Security. At Tesco, the application security team’s strategy is to provide security tooling that fits seamlessly into software engineering teams ways of working, helping them find and deal with security problems early within the software development process before it reaches production.

• Identify appropriate toolsets that fit with the application security team’s strategy and provide comprehensive guidance that allow engineering teams to effectively self‑serve with our toolsets.
• Identify security toolsets that effectively uncover security issues in code written by our software engineers and third‑party dependencies.
• Provide domain expertise on all areas of security and privacy throughout the Software Development lifecycle.
• Embed yourself in our culture and processes working in line with agile practices such as Scrum.
• Identify gaps in software engineering practices and recommend appropriate, streamlined security solutions.
• Deliver training on core application security products to both security and engineering teams.
• Write comprehensive guidance for the selected security tooling.
• Provide technical support for our products and engineers.

• Strong expertise in at least one of the following programming languages:
  Python, Java, JavaScript/Type Script, C#, Go.
• Proficient in secure code review of at least one language (Java, JavaScript, C#).
• Experience deploying security tooling into a Dev Ops environment.
• Deep understanding of application security (Web, API, Mobile).
• Understanding of microservices and container orchestration.
• Solid grasp of Application Security Tooling (SCA/SAST/DAST/IaC Security).
• Knowledge of OWASP Top 10, Mitre Top 25 and CVSS frameworks, mapping to business risk.
• Experience implementing security into different stages of a Dev Ops lifecycle.
• Excellent written and verbal communication skills.
• A team player who can translate technical risk into business risk when assessing software vulnerabilities.

• Annual bonus scheme of up to 20% of base salary.
• Holiday starting at 25 days plus a personal day (plus Bank holidays).
• Private medical insurance.
• 26 weeks maternity and adoption leave (after 1 year’s service) at full pay, followed by 13 weeks of Statutory Maternity Pay or Statutory Adoption Pay, and 6 weeks fully paid paternity leave.
• Free 24/7 virtual GP service, Employee Assistance Programme (EAP) for you and your family, free access to a range of experts to support your mental wellbeing.

Our vision at Tesco is to become every customer’s favourite way to shop. Our core purpose is ‘Serving our customers, communities and planet a little better every day’. We are proud to have an inclusive culture where everyone truly feels able to be themselves. We are committed to creating a workplace where differences are valued, and we offer a range of full‑time and part‑time working patterns, combining office and remote work.

Seniority level:
Entry level;

Employment type:

Full‑time;
Job function:
Information Technology;
Industries:
Retail.