This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
The Application Security Assurance Specialist - Principal is a pivotal role focused on enhancing application security within software development and deployment pipelines. The candidate should have over 5 years of experience in managing security frameworks and tools, with a strong understanding of compliance standards. Key responsibilities include defining security practices, conducting risk assessments, and collaborating with development teams. Certifications such as CISSP or CSSLP are preferred. The role offers opportunities for professional growth and the chance to work with cutting-edge security technologies.
Job Responsibility:
Define and enforce embedded security practices across SDLC and CI/CD pipelines, ensuring compliance with organisational security policies and standards
Oversee the integration of advanced security tools (e.g., SAST, DAST, SCA, automated secret scanning) with development environments
Provide technical guidance on security configuration management, deployment hardening, and secure integration of tooling across all phases of software delivery
Conduct in-depth security risk assessments for high- and low-level technical designs, evaluating compliance against OWASP, CIS Benchmarks, and secure coding standards
Perform comprehensive security testing across application environments, including API security, container scanning, and dynamic runtime assessments, while evaluating residual risk post-assessment
Collaborate with stakeholders to assess the security maturity of existing practices and recommend improvements
Provide expert-level recommendations on the refinement of automation processes, risk mitigation strategies, and the deployment of compensating controls
Evaluate emerging technologies and leverage AI-driven application security tools to optimise assurance activities
Partner with development and DevSecOps teams to embed robust security measures within workflows
Actively engage in the training of development teams, fostering a culture of security awareness
Lead cross-functional teams to complete security assurance initiatives effectively
Generate actionable reports and presentations tailored to technical and non-technical audiences
Maintain clear, auditable documentation for compliance purposes and contribute strategic insights into executive-level reviews
Requirements:
5+ Years experience in providing technical expertise in managing security frameworks and tools (SAST, DAST, SCA, container security, etc.)