We're looking for a Cloud Application Security SME to join our delivery team, and help shape and direct our clients' security transformation journeys.

We work closely with the public sector, and as such you will be required to undergo SC clearance for this position. 

Here's some points on what to expect: 

• Working within agreed timelines throughout the evaluate, design and build phases to identify security requirements; define application security solutions; configure and test using DevSecOps tools and platforms.
• Leveraging your core competence and knowledge of industry Application Security standards, frameworks and good practices to support security reviews, enablement, validation or definitions of application security outcomes.
• Identifying:
  • Client needs for application security technology/tools and process adoption.
  • Technical security requirements, both functional and non-functional.
  • Gaps, issues, assumptions and failings in the client application security landscape.
  • Client needs in terms of outcomes, stakeholder engagement and risk mitigation.
• Defining:
  • Project testing strategy, test plans, test scenarios and approach.
  • Security environment objectives and targets, including change impact and risk.
  • Cross-team implementation plans.
  • Appropriate metrics and processes to achieve client objectives and targets.
• Enacting:
  • The setup of application security specific components and processes for development, test, and production environments.
  • Application security and DevSecOps technology implementations and configurations.
  • Robust practices for the protection and security of client systems
• Oversee, evaluate, and support:
  • Discovery and audits
  • Documentation, validation, assessment, and authorisation
  • GRC Consultants and Service/Solution architects in the securing of products and services.