oracle
Manager Application Security
Hansen Technologies
England, GBR
Full-time
Manager
Onsite
Discovered 3 days ago
awsazurebashjavajavascriptjenkins
Key Skills for This Role
awsazurebashjavajavascriptjenkins
Full Job Posting
What You Bring
- Significant hands-on experience in DevSecOps, Application Security, Product Security, platform security, software engineering, or security engineering.
- A strong coding or scripting background, with the ability to build maintainable security integrations, plugins, connectors, and automation.
- Practical experience working with APIs, source control, CI/CD pipelines, and modern software delivery practices.
- Deep knowledge of AppSec technologies, including the implementation, operation, integration, and tuning of SAST, DAST, SCA, and related capabilities.
- Experience integrating application security technologies with vulnerability-management or exposure-management platforms and engineering workflows.
- Experience securing applications, APIs, cloud-native services, containers, and infrastructure as code.
- Experience using AI-assisted coding or security tools, supported by sound judgement around validation, data handling, and secure use.
- The technical credibility to collaborate effectively with software engineers, platform teams, architects, product leaders, and senior security stakeholders.
- A pragmatic and enabling mindset, with a focus on measurable security outcomes rather than theory or compliance activity alone.
Nice to Have
- Previous experience as a DevSecOps Lead, Application Security Lead, Product Security Engineer, Security Engineering Lead, or senior software or platform engineer with substantial security responsibilities.
- Coding or scripting capability in languages such as Python, Java, JavaScript/TypeScript, C#, Go, PowerShell, or Bash.
- Experience with GitHub, GitLab, Azure DevOps, Jenkins, or comparable CI/CD ecosystems.
- Experience working with Microsoft Azure, AWS, Kubernetes, and containerised environments.
- Practical knowledge of OWASP Top 10, OWASP ASVS, OWASP SAMM, the NIST Secure Software Development Framework, and threat-modelling methodologies.
- Experience within enterprise software, SaaS, utilities, energy, or communications environments.
- Relevant certifications such as CSSLP, GIAC secure-software credentials, OSCP, AWS Security Specialty, or Microsoft Azure security certifications, although equivalent practical experience is equally valued.
- Benefits and Perks
- Join us for a rewarding career with competitive compensation, leave entitlements, health coverage, and financial security. Enjoy work-life balance, growth, and recognition for your exceptional performance. Our team will unveil the intricacies of our benefit package during the selection process.
Qualifications
- Significant hands-on experience in DevSecOps, Application Security, Product Security, platform security, software engineering, or security engineering.
- A strong coding or scripting background, with the ability to build maintainable security integrations, plugins, connectors, and automation.
- Practical experience working with APIs, source control, CI/CD pipelines, and modern software delivery practices.
- Deep knowledge of AppSec technologies, including the implementation, operation, integration, and tuning of SAST, DAST, SCA, and related capabilities.
- Experience integrating application security technologies with vulnerability-management or exposure-management platforms and engineering workflows.
- Experience securing applications, APIs, cloud-native services, containers, and infrastructure as code.
- Experience using AI-assisted coding or security tools, supported by sound judgement around validation, data handling, and secure use.
- The technical credibility to collaborate effectively with software engineers, platform teams, architects, product leaders, and senior security stakeholders.
- A pragmatic and enabling mindset, with a focus on measurable security outcomes rather than theory or compliance activity alone.
Responsibilities
- Own and continuously improve AppSec capabilities, including SAST, DAST, software composition analysis, container scanning, infrastructure-as-code scanning, and secrets detection.
- Configure and tune security policies, rules, tests, and guardrails to reduce false positives and provide actionable results for engineering teams.
- Design and build integrations, plugins, connectors, and automated workflows across AppSec platforms, engineering systems, ticketing tools, and vulnerability-management technologies.
- Embed automated, risk-based security testing and controls into CI/CD pipelines and modern software delivery workflows.
- Apply AI-assisted development and security capabilities to improve coding, detection, analysis, triage, prioritisation, and remediation guidance.
- Partner with developers and technical leads to explain security findings, identify practical solutions, and validate remediation.
- Create reusable secure-development guidance, engineering patterns, reference implementations, and practical examples.
- Provide hands-on security input for higher-risk application designs, APIs, cloud-native services, and architectural changes.
- Conduct or support threat modelling, secure code reviews, technical assessments, and penetration-testing activities where specialist involvement is required.
- Contribute to Product Security roadmaps, technical standards, security metrics, and targeted Security Champions initiatives.
About Hansen Technologies
Software & SaaS1633 employeesFounded 1971
Public Australian software and services provider helping energy, utilities, and communications companies manage products, billing, and customers.
Visit company websiteJobs and hiring trendsApply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Hansen Technologies
AI-First Engineering Transformation Lead
, GBR
Discovered 2 days agoFull-time
Business Development Director
London, GBR
Discovered 2 weeks agoFull-time
Business Development Director
Carolina, USA
Discovered 2 weeks agoFull-time
Software Development Manager
Bethlehem, USA
Discovered 2 weeks agoFull-time
Financial Controller
, GBR
Discovered 3 weeks agoFull-time
Partner Manager, Americas
Atlanta, USA
Discovered 3 weeks agoFull-time
Senior Product & Solutions Marketing Manager
Atlanta, USA
Discovered 3 weeks agoFull-time