Specialist Product Engineer (Security Engineer) - software engineer focused on security

A vacancy for a Specialist Product Engineer (Focus on Security) has opened up.

Job profile: Specialist Product Engineer (Software Engineer with a focus on security)

• Preferably proficient in either Java or C#

Experience with:

• DevOps
• CI/CD
• Agile
• Understanding of Security platform (pref)
• Front End tools (React or Angular or JavaScript)
• Data oriented, will be dealing with reams of data

Accountabilities:

• Develop reference implementations to prove and demonstrate use of security components for product engineering teams.
• Develop components to automate security testing within build processes.
• Assist product engineering teams with implementation of security components.
• Assess security tools and integrate tools where needed.
• Configure new and existing security tools to support security testing activities.
• Document security patterns relevant to product engineering teams.
• Document guidelines aligned to security standards.
• Consult with teams in security code reviews where needed.
• Develop skill in Thread Modelling and assist others with the process.
• Develop security training and guidance to internal development teams.
• Work across organisational structures where required to achieve the stated goals.
• Engage in learning and skills development focused on security, including achieving relevant certifications and informal security skills development through Capture The Flag exercises.
• Assist with organisation of the Security Champions program.
• Understand the security environment within the bank that drives the requirements for security tools, security testing capabilities and policies and standards that apply to our engineering activities.
• Keep informed on what is going on in the organisation e.g. coding standards, patterns & practices, ongoing organisational security initiatives, current incidents and risks.
• Triage and handle security issues.
• Participate in security architecture reviews.