Application Security Consultant - UK wide (including NI)
PwC is looking to recruit Application Security experts at a Manager grade to help lead the Software Security & Assurance business.
In this role, you will act as our application security subject matter expert and lead security engagements with development and security teams, helping to embed application and software security into the SDLC. You will work with DevOps teams to ensure security requirements and secure development are incorporated into the processes, as well as develop and manage the delivery of technical security standards.
The ideal candidate will be experienced in secure coding practices, software engineering and have demonstrable experience of working with clients in an advisory or consultative environment. Engaging with an ability to communicate application & software security to business leaders is a key value.
This role would suit someone who is looking for a unique opportunity to be established as a leader in Cyber Security and Software Security & Assurance.
Qualifications & Experience
Experience working within secure application architecture/design and assurance, as well as in software development is required. You will have experience identifying, assessing and providing remediation options for software, web application and cloud technology related security risks.
In-depth knowledge of the OWASP top 10 vulnerabilities, SANS Top 25 and CWE (exploitability, prevalence, detectability as well as understanding of business and technical impacts, attack vectors and relevant threat actors).
Good knowledge of distributed/microservices architectures
Strong hands-on experience vulnerability management, static and dynamic code analysis
Evaluate the likelihood and impact of application vulnerabilities; develop and drive mitigation approaches.
Maintain accurate representation of application risks, vulnerabilities, and advise on remediation
Must have a strong knowledge of web and mobile application security testing frameworks and methodologies,
Familiar with conducting a threat model
Able to provide risk assessment and remediation guidelines for developers and business application owners.
Expert familiarity with multiple programming languages and secure coding practices.
Undergraduate degree or equivalent (preferably 2:1 or higher) in a relevant field (e.g. Computer Engineering, Computer Science, Information Security) or in a STEM major (Science, Technology, Engineering, or Math) is strongly preferred and a Master's degree in relevant field is desired.
Security accreditations such as CSSLP, CREST, OCSP, OSCE, CISSP.
Architecture certifications such as TOGAF, SABSA, Zachman is desirable
In Return We Offer
Variety - An impressive list of clients with different needs and issues at both a technical and strategic level.
Opportunity - To develop your technical and business skills and enhance your business advisory, presentational and interpersonal skills.
Support - We work as a team and support each other on a day-to-day basis. We also actively encourage an ongoing exchange of knowledge across the many specialists operating within PwC.
Training - PwC is recognised for the quality of its training programmes that cover both technical and 'soft' skills.
Challenge - We work in an atmosphere which encourages you to be proactive and imaginative with the emphasis always on serving clients' needs
Leading and delivering security assignments, including producing documentation and reports.
Reviewing security architectural designs.
Creating, reviewing and enforcing security design patterns to support application architecture.
Consulting with application business owners to support development of business requirements.
Assessing applications from both a technical and business function perspective.
Determining security requirements; planning, implementing and preparing security coding standards, policies, and procedures.
Understand current compliance frameworks for cloud providers, as well as future trends
Translate customer business issues/opportunities into technical solution/business requirements.
Provide insight into the latest application security vulnerabilities and exploits
Conduct manual security assessments & static code analysis against software source code, web applications and apis across a variety of technology stacks
Conduct and deliver reports on application security design review assessments using threat modelling.
Conduct open source software security evaluations
Supporting senior members of the team in developing client proposals and solution offerings.
Maintaining technical IT knowledge and certifications, sharing this knowledge with junior team members.
Building client relationships and establishing credibility by demonstrating knowledge of various aspects of cyber security, and identify opportunities where PwC can assist.
Working either as subject matter experts in your field and/or manage teams in delivering engagements.
Working with colleagues in other services areas and support our clients’ cyber security needs.
Managing teams in delivering client excellence and work with other subject matter experts.
Driving the development of toolkits, methodologies and accelerators.
Providing thought leadership and direction for the cyber security practice.
Helping recruit, retain and develop other cyber security team members.
Competitive salary and benefits
Location: London, Edinburgh, Birmingham, Belfast