Remote Principal Product / Applications Security Engineer Job in UK Sophos

Who you are

• 5+ years of experience in cybersecurity with specific experience in holding a similar role
• Demonstrable experience in securing services primarily built on AWS and Azure
• A pragmatic approach to securing products leveraging different technologies facing different threat profiles
• Strong knowledge of application security and common web application vulnerabilities and experience with secure coding practices
• A willingness to work directly with engineers and an appetite to understand the technical details of their projects
• Proficiency and understanding of working with NIST SSDF ASVS and other cybersecurity frameworks
• Familiarity with security tooling which is used to support an SSDLC
• Strong project management skills to drive and oversee the implementation of security initiatives

What the job involves

• Lead security reviews with internal product and engineering teams to identify potential issues in product designs
• Drive the adoption of shared cybersecurity services such as SCA SAST and DAST
• Assist in the development and adoption of new standards and policies
• Impart education to key stakeholders from both technology and business teams regarding aspects of security to ensure consistent 'security by design' considerations are factored in at an early stage
• Support the running of our Cybersecurity Champions program and serve as a liaison to support security advocates across the business
• Provide guidance to the team fostering a collaborative and high-performing work culture