Lead Application Security Engineer

Description

Lead Application Security Engineer

London

Basic salary + Shares

Funding Circle was created with one mission: to revolutionise the broken financial system and change small business finance!

We've created the leading online marketplace for small business loans that directly connect credit worthy businesses with investors wanting attractive returns.

We have 90,000 investors who to date have lent £7 billion to 68,000 businesses across the world. In 2018 alone lending through our platform created and sustained 115,000 jobs worldwide and contributed £6.5 billion to the global economy

The InfoSec Team

We are a really close-knit group,  we partner with the rest of the business to secure our customers' money and data. We minimise the impact to the business, while providing actionable intelligence where and when it's needed most. Come join our team and help us improve the security of our infrastructure through innovative use of tools and automation.

As a Lead Application Security Engineer you will…

• Manage a small but growing team of application security engineers across multiple geographies
• Scope and implement application security tooling, such as SAST or DAST, and scripting to seamlessly integrate with the developer pipeline
• Coordinate with engineering teams globally to develop features that are inherently secure
• Coordinate with Information Technology and Production Operations teams to take a holistic view on securing applications
• Properly balance security risk against the other needs of the business
• Triage issues found by tools, external reports, and various tests, to accurately assess the real risks
• Perform penetration testing on a broad range of applications that cover everything from the borrower and investor side of our business, as well as the data that supports it all.

We are looking for these skills...

• Strong experience in application security with knowledge of:
• Encryption & hashing
• Authentication and session management
• Application threat modelling
• OWASP Top Ten
• Some knowledge of programming languages such as Ruby, Clojure, Python or other similar languages.
• Strong communication and ability to build rapport with technical and non-technical teams

It would be beneficial if you had these skills…

• BS or MS in Computer Science, Information Security or equivalent
• Hands-on experience in Amazon Web Services, including Identity and Access
• Experience managing individual contributors

Why Join Us?

Happy employees are productive employees, that’s why we offer a hearty benefits package including:

• Our employees make our mission a reality, and we want you to share in the company’s success by offering generous shares.
• Private healthcare, pension and healthcare cash back schemes
• Discounted onsite gym membership
• Learning and development through FC Academy
• Personal development funding
• Cool kit - Mac or PC
• Flexible working
• Free breakfast, barista coffee and discounted hot lunch at our Funderbar!
• We are a regular host of Meet-Ups and events.
• Company wide socials

At Funding Circle, we celebrate and support the differences that make you, you. We’re proud to be an equal opportunity workplace and affirmative action employer. We truly believe that diversity makes us better.