Talent.com
Fortinet
Senior Application Security EngineerFortinet • LONDON, United Kingdom
Senior Application Security Engineer

Senior Application Security Engineer

Fortinet • LONDON, United Kingdom
30+ days ago
Job type
  • Full-time
Job description

Senior Application Security Engineer

Fortinet is looking for a Sr. Application Security Engineer to join the Corporate Information Security team. This is a highly technical role, with responsibilities conducting security reviews on various Fortinet applications, providing security education to our engineers and handling externally reported vulnerabilities.

Key Responsibilities:

  • Serve as an application security subject matter expert who provides guidance to internal teams
  • Work closely with development teams, perform code reviews, penetration tests, and architectural reviews on existing codes and new features.
  • Develop, implement, and communicate vulnerability mitigation strategies to development teams
  • Handle externally reported vulnerabilities as a member of Corporate Information Security Responsible Disclosure Program committee.
  • Drive Fortinet static and dynamic application security testing program.
  • Develop strategies, evaluate solutions, design and implement tools, processes and controls to ensure that security and privacy are designed in Fortinet applications
  • Advise development teams on SDLC best practices.
  • Proactively research new attack vectors on applications that may affect Fortinet applications and infrastructure.
  • Be part of a global distributed team to share knowledge, workload and assignments. Strong sense of teamwork is required. Coach peers in application security concepts and best practices.

Required Skills/Experience:

  • 5+ years of work experience as an Information Security Researcher or Engineer
  • 3+ years of experience with manually auditing source code to find security issues or programming skills in one or more of: Java, .NET, Python or JavaScript frameworks.
  • Strong understanding on OWASP TOP 10 vulnerabilities.
  • Strong understanding of common API security risks
  • Strong understanding on Cloud-Native application architecture, microservices, containerization technologies, secure deployment and implementation issues.
  • Proven experience in application penetration testing
  • Proven experience in security code review
  • Proven experience in application security testing (DAST, SAST, IAST, SCA) tools and processes
  • Strong foundation in computer and network security, authentication & authorization, security protocols and applied cryptography
  • Solid understanding with web security standards such as CSP, SOP, CORS, and emerging web security technologies.
  • Solid understanding on CI/CD pipelines, build systems and DevSecOps principles.
  • Experience defining security architecture patterns and standards in a large enterprise organization.
  • Experience with cloud-based security solutions and familiarity with cloud service providers, particularly in relation to application security
  • Experience working with threat modeling methodologies such as MITRE ATT&CK, STRIDE, PASTA etc.
  • Efficiency with web proxies such as Burp or OWASP ZAP or Fiddler
  • Understanding of OAuth and JWT implementations.
  • Ability to organize & communicate effectively, both written and verbal, with technical and non-technical people across functional teams
  • A BS degree in Computer Science, Cyber Security, other tech-related degree, or equivalent experience.
  • Experience in Cloud Security Posture Management (CSPM) and/or Application Security Posture Management (ASPM) tools is a plus.
  • Having OSWE OSCP, GWEB, GPEN or similar certificate is a plus
  • Experience in Mobile Application Penetration Testing is a plus
  • Familiarity with AI&ML & LLM concepts, AI Red Teaming, AI Guardrails is a plus.

#LI-Hybrid

Create a job alert for this search

Senior Application Security Engineer • LONDON, United Kingdom

Similar jobs

Senior Application Security Specialist

La FosseGreater London, England, GB
Full-time

Application Security Specialist - London (Hybrid) - up to £90,000 + bonus + benefits.La Fosse has partnered with a global retail business to hire an Application Security Specialist into a senior ro... Show more

 • Promoted

Application Security Engineer — AI-Driven Cloud Security

AMAZON UKGreater London, England, United Kingdom
Full-time

Amazon is seeking an experienced Application Security Engineer to join the Application Security team in the UK.You will prioritize and communicate security priorities, maintain a high level of owne... Show more

 • Promoted

Senior Service Engineer

HSB TechnicalCity Of London, England, GB
Full-time

Senior Service Engineer – CCTV & Electronic Integrated Security.Responsible for engineering, maintenance, technical support and lifecycle management of a portfolio of CCTV, Access Control, and Inte... Show more

 • Promoted

Senior Security Engineer

CMG (Capital Markets Gateway)Greater London, England, United Kingdom
Full-time

Capital Markets Gateway LLC (CMG) is a financial technology firm, uniquely focused on the equity capital markets (ECM), connecting investors and underwriters via a neutral platform.CMG delivers int... Show more

 • Promoted

Senior Security Engineer - Contract

jobr.proGreater London, England, United Kingdom
Full-time

An online savings platform, reinventing how individuals, businesses, and charities manage, protect, and grow their cash.A diverse group of people, bound by a collaborative spirit, and shared purpos... Show more

 • Promoted

Senior Security Engineer

Data Science FestivalGreater London, England, United Kingdom
Full-time

Staff Software Security Engineer.London (Hybrid – 3 days per week in the office).We are currently looking for a.Staff Software Security Engineer.This is an exciting opportunity to join a highly col... Show more

 • Promoted

Senior Security Engineer

Capital Markets GatewayGreater London, England, United Kingdom
Full-time

Capital Markets Gateway LLC (CMG) is a financial technology firm, uniquely focused on the equity capital markets (ECM), connecting investors and underwriters via a neutral platform.CMG delivers int... Show more

 • Promoted

Senior Security Engineer

CybanetixGreater London, England, GB
Full-time

Senior Security Engineer, Governance, Risk and Compliance (London).London, England, United Kingdom.Join us and help shape the security posture of the organisations we support.You will work directly... Show more

 • Promoted

Senior Security Engineer - Contract

flagstoneim.comGreater London, England, United Kingdom
Full-time

An online savings platform, reinventing how individuals, businesses, and charities manage, protect, and grow their cash.A diverse group of people, bound by a collaborative spirit, and shared purpos... Show more

 • Promoted

Senior Product Security Engineer

Qube Research and TechnologiesGreater London, England, GB
Full-time

Qube Research & Technologies (QRT) is a global quantitative and systematic investment manager, operating in all liquid asset classes across the world.QRT is a technology and data‑driven group imple... Show more

 • Promoted

Senior Security Engineer: Observability, Automation & Risk

CFCCity Of London, England, GB
Full-time

CFC is seeking a Staff Security Engineer to advance security observability, automate controls and strengthen governance across its global tech estate.This senior individual contributor role partner... Show more

 • Promoted

AI Security Engineer, Application Security (Remote)

WriterGreater London, England, GB
Remote
Full-time

A leading AI-focused company in Greater London seeks a Security Engineer to build the security foundations for its AI systems.This role focuses on application security, partnering with engineering ... Show more

 • Promoted

Senior Application Security Engineer

FortinetCity Of London, England, GB
Full-time

Senior Application Security Engineer role at Fortinet.This is a highly technical role within the Corporate Information Security team, with responsibilities including conducting security reviews on ... Show more

 • Promoted

Senior Security Platform Engineer (m/f/d)

NTT Global Data CentersGreater London, England, United Kingdom
Full-time

The Senior Security Platform Engineer (m/f/d), is an advanced subject matter expert, responsible for facilitating problem resolution and mentoring for the overall Global Data Centers Office of Info... Show more

 • Promoted

Senior App Security Engineer - Build Secure, Scalable Apps

Yelp, IncGreater London, England, GB
Full-time

Yelp, Inc is seeking an Application Security Engineer to enhance the security of its applications and services.This role involves collaborating with engineers to ensure security is integrated into ... Show more

 • Promoted

Senior Manager – Application Security

MiroGreater London, England, United Kingdom
Full-time

The Senior Manager of Application Security leads a global team responsible for embedding security into Miro’s Software Development Lifecycle (SDLC)—from concept to code to customer impact.This team... Show more

 • Promoted

Senior Security Engineer

SpendeskGreater London, England, United Kingdom
Full-time

Spendesk is building the leading spend management platform for modern businesses, processing billions of euros across Europe and beyond.Security is at the heart of what we do, and we’re committed t... Show more

 • Promoted

Senior Security Engineer

SandersonGreater London, England, GB
Full-time

We are looking for a Security Engineer to design, implement, and operate security controls across a hybrid environment spanning Microsoft Azure, on‑prem infrastructure, SaaS platforms, and a large ... Show more

 • Promoted

Senior Security Engineer

Woolf ConnectionLondon, England, GB
Full-time

This range is provided by Woolf Connection.Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.Direct message the job poster from Woolf Connection.D... Show more

 • Promoted

Senior Security Engineer (Defender, PurView)

InvitISE LtdGreater London, England, GB
Temporary

We’re looking for a Senior Security Engineer for our client in the data sector, based in London, on an initial 3 to 6 month contract paying up to £500 per day Outside IR35.This role offers hybrid w... Show more