Talent.com
MUFG Investor Services
DevSecOps EngineerMUFG Investor Services • London, England, UK
DevSecOps Engineer

DevSecOps Engineer

MUFG Investor Services • London, England, UK
26 days ago
Job type
  • Full-time
Job description

We are seeking a proactive and collaborative Application Security Engineer who speaks the language of developers thrives in the purple team space and is an automation advocate. The successful candidate will work closely with engineering & IT teams to enhance the security of our applications APIs and infrastructure by implementing preventative controls and identifying risks through security testing.

You Will:

  • Act as a security champion to foster the secure by design approach across the business.
  • Support the identification and analysis of web application security vulnerabilities across the business to reduce risk.
  • Oversee daily management of application security platforms to maintain comprehensive coverage ensure compliance and remediation of findings.
  • Conduct threat modelling and review application architectures to identify potential risks early in the SDLC.
  • Implement application security controls and proactive measures to prevent security incidents.
  • Implement and manage SAST/SCA tooling across our application repositories to identify source code risks.
  • Scale automated DAST solutions across our applications to maximise testing coverage and provide visibility into runtime security posture.
  • Provide security guidance and remediation advice to engineers where applicable.
  • Carry out penetration testing on internally developed applications to identify security defects.
  • Review and assess the security of third-party vendor applications through configuration and hardening reviews.
  • Validate remediation of security issues by the development team and 3rd parties.
  • Coordinate and arrange external penetration testing assessments to independently evaluate the security of our applications.
  • Build and maintain effective collaboration with development and IT teams.


Qualifications :

You Have:

  • Experienced in applications security focusing on red blue or purple team activities.
  • Experienced in software development or experience contributing to Open-Source projects.
  • Experienced with DAST tools such as Burp Suite OWASP Zap or similar.
  • Experience with SAST/SCA tools such as Snyk Veracode Checkmarx or similar.
  • Proficient in one or more of the following languages - Python JavaScript .NET or Java.
  • Well-versed in analysis of open source and third-party library vulnerabilities.
  • Well-rounded knowledge of the Software Development Life Cycle (SDLC) and agile methodologies.
  • Hold a strong understanding and experience testing of both REST and GraphQL APIs.
  • Demonstrated experience with development tools including GitLab/GitHub Datadog Jira Docker and various IDEs.
  • Previously worked very closely with development and DevOps teams to resolve security issues.
  • Have performed security-focused code reviews to identify code level issues.
  • Experience in creating custom security tooling or scripts.

Preferred

  • Experience in the financial sector or another heavily audited industry.
  • Experience with cloud services particularly AWS services like WAF Cognito etc.
  • Experience working with Infrastructure as Code Kubernetes and Containers.
  • Experience with auth mechanisms like Open ID Connect OAuth and identity providers.
  • Experience in creating custom CI/CD pipeline jobs to carry out security related reviews or scans.


Additional Information :

Whats in it for you to join MUFG Investor Services

Take a look at our careers site and youll find everything youd expect from a career with the fastest-growing business at one of the worlds largest financial groups. Now take another look. Because its how we defy expectations that really defines us. Youll feel that difference in all kinds of ways. Our vibrant CULTURE. Connected team. Love of innovation laser client focus and next-level LEARNING & DEVELOPMENT.

So why settle for the ordinary Apply now for a Brilliantly Different career.

We thank all candidates for applying; however only those proceeding to the interview stage will be contacted.

We are an equal opportunity employer.


Remote Work :

No


Employment Type :

Full-time


Experience: years
Vacancy: 1
Create a job alert for this search

DevSecOps Engineer • London, England, UK

Similar jobs

DevOps Engineer

Zazu-DigitalGreater London, England, GB
Full-time

A leading public sector organisation is undergoing a major transformation of its digital and engineering capabilities.As part of this shift, they are hiring a.DevOps-minded software engineer.This r... Show more

 • Promoted

DevOps Engineer

JobtailorGreater London, England, GB
Full-time

Manage and monitor all Linux infrastructure associated with the Newquay platform.Install, configure, test, and maintain operating systems, applications software and systems management tools.Ensure ... Show more

 • Promoted

DevOps Engineer

introGreater London, England, GB
Full-time +1

Your actual pay will beemarkbased on your skills and experience — talk with your recruiter to learn more.Direct message the job poster from intro.Recruitment Consultant at intro | Specialising in t... Show more

 • Promoted

DevSecOps Engineer

Space ExecutiveGreater London, England, GB
Full-time

DevOps Engineer – Transform Financial Infrastructure.We’re looking for a proactive DevOps Engineer to help shape the reliability, scalability, and security of a fast-growing, cloud-native platform ... Show more

 • Promoted

DevOps Engineer

GenixbitGreater London, England, GB
Full-time

Join our infrastructure team to build and maintain our cloud infrastructure and deployment pipelines.Manage and scale cloud infrastructure.Implement and maintain CI/CD pipelines.Monitor system perf... Show more

 • Promoted

DevOps Engineer

CapgeminiGreater London, England, GB
Full-time

About The Job You’re Considering.In Digital Customer Experience we specialise in navigating our clients through the complexities of large‑scale, technology‑driven transformation programs, using our... Show more

 • Promoted

Lead DevSecOps Engineer

AronditeGreater London, England, GB
Full-time

Arondite enables organisations to wield autonomy, data and AI at scale.We equip operators with the foundational software to orchestrate their mix of platforms and capabilities, and then take missio... Show more

 • Promoted

DevOps Engineer

Experis UKGreater London, England, GB
Full-time

Responsible for designing and developing infrastructure systems that leverage zero trust architectures and infrastructure-as-code methodologies.This role focuses on robust, scalable, and secure sol... Show more

 • Promoted

DevOps Engineer

TP ICAPGreater London, England, GB
Full-time

TP ICAP Group is a world leading provider of market infrastructure.Our purpose is to provide clients with access to global financial and commodities markets, improving price discovery, liquidity, a... Show more

 • Promoted

DevOps Engineer

GenixBit Labs Pvt. Ltd.Greater London, England, GB
Full-time

Join our infrastructure team to build and maintain our cloud infrastructure and deployment pipelines.Manage and scale cloud infrastructure.Implement and maintain CI/CD pipelines.Monitor system perf... Show more

 • Promoted

DevSecOps Engineer

Trust In SODAGreater London, England, GB
Full-time

Inside or Outside IR35 (assessment pending / depending on engagement).We’re working with a cloud-native technology organisation operating in a regulated environment, currently scaling their DevSecO... Show more

 • Promoted

DevSecOps Engineer

Consortia GroupCity Of London, England, GB
Full-time

Consortia has partnered with an innovative Fintech company at the forefront of transforming the financial services industry.This dynamic environment offers you a unique opportunity to be part of a ... Show more

 • Promoted

DevSecOps Engineer

ImmediateCity Of London, England, GB
Full-time

DevSecOps Engineer (up to £84,000).Immediate is home to some of the biggest and most loved consumer brands in the UK, including Radio Times, Good Food and BBC Gardeners World magazine.Our trusted, ... Show more

 • Promoted

DevOps Engineer

Diffractive LabsGreater London, England, GB
Full-time

We are seeking a DevOps Engineer to build and own the infrastructure that underpins our AI‑driven materials discovery platform.You'll work directly with world‑renowned ML researchers and software e... Show more

 • Promoted

DevOps Engineer

CrederaGreater London, England, GB
Permanent

We know great talent comes in many forms — including people returning from a career break.If you’re looking for part‑time hours, flexible working, or a supportive transition back into your career, ... Show more

 • Promoted

DevSecOps Engineer

The EconomistGreater London, England, GB
Full-time

We are an organisation that exists to drive progress.That's the “red thread” that connects everyone at The Economist Group (TEG).Our businesses share a devotion to innovation, independence and rigo... Show more

 • Promoted

Senior DevSecOps Engineer

Yapily LtdGreater London, England, GB
Full-time

Why we exist, and where we’re headed:.Our Mission: Redefining how the world interacts with value.Our Vision: A world without financial friction.Our Purpose: To empower everyone to access and move v... Show more

 • Promoted

DevOps Engineer

P2PGreater London, England, GB
Full-time

We value autonomy and the ability to quickly pivot to capture opportunities, so we operate using our own capital and trading at our own risk.Chicago with offices throughout the U.Canada, Europe, an... Show more

 • Promoted

DevOps Engineer

DRW Holdings, LLC.Greater London, England, GB
Full-time

We value autonomy and the ability to quickly pivot to capture opportunities, so we operate using our own capital and trading at our own risk.Headquartered in Chicago with offices throughout the U.C... Show more

 • Promoted

DevOps Engineer

SLAMcoreGreater London, England, GB
Full-time

Since being founded in 2018, Copper has been building the standard for institutional digital asset infrastructure with a focus on custody, collateral management, and prime services.Led by Amar Kuch... Show more