Job Description

Role Description

At FNZ we take security seriously, our growing of the security organisation reflects this. We are developing a class leading security function and are looking for passionate people to join our team.

We are looking for someone to help build our application security function. Reporting directly to the Application Security Lead, this exciting opportunity will have an important role in enhancing application security across the group.

The role will be working closely with the development teams to ensure the end to end security of our applications. This will cover everything from the idea / design phase through to applications in production. From threat modelling / design and code reviews to manual and automated security testing. The role will also provide input to application security training and advise on best security practise to the development teams across the group.

Specific Role Responsibilities

• Supporting the release of secure code across FNZ group

• Support security reviews
• Fostering a great culture
• Provide threat modelling support
• Support FNZ application/product releases
• Assuring the security of the applications we develop
• Implementing our application security strategy

• Design reviews
• Threat modelling
• Code scanning
• Third party library security
• Dynamic security testing
• Mobile application scanning
• API scanning
• Engaging with architects, engineers, security champions and product teams across the organisation
• Driving developer engagement and a culture of secure development
• Managing relationships with key suppliers

Experience required

• Ideally performed a similar role
• Able to work in extremely fast-paced environment, collaboratively, and autonomously
• Understand the SDLC processes and tooling
• Comfortable with collaboration, open communication and reaching across functional borders with a strong focus on business outcomes
• Worked with internationally distributed teams for a global organisation
• Experience in one or more of; various .Net (c#, ASP, 'net core) SQL, React
• Not essential, but knowledge of Delphi / RPG / COBOL also beneficial
• Must have experience in hybrid environments using both on premise data centres and cloud hosting
• Experience of OWASP and SANS
• Exposure to deployment tools such as Jenkins and Team City
• Ideally experience working across organisations that use Waterfall and more Agile / DevOps ways of working
• Fintech/Financial Services sector experience desirable
• An understanding of the UK platform market desirable

At FNZ, we recognise that diversity, inclusion, and accessibility are important factors for our success. We embrace the unique perspective and capabilities of our current and future employees, which will help us continue to drive innovation and achieve our business goals. Recruitment decisions at FNZ are made in a non-discriminatory manner where all employees are valued and respected. In particular, we want to ensure accessibility needs are well supported thus, ensuring our recruitment process is fair and equitable for all applicants.

Please let us know if there is any support we can provide to ensure FNZ's recruitment process is fully accessible to you. You can contact us at recruitment2@fnz.co.uk to discuss specific requirements.

#LI-MQ1