We’re supporting a global engineering organisation looking for a Contract Application Security specialist to help embed secure development practices across their software and related hardware products. This is likely to be a multi-year contract (outside IR35).
Key experience:
You’ll work closely with engineers and leadership to drive secure SDLC, threat modelling, assess vulnerabilities, and support alignment with the EU Cyber Resilience Act.
- Product Security / Application Security
- Strong Understanding of software development environments
- Familiarity with threat modelling and vulnerability assessments
- Secure coding principles / OWASP
- Ability to engage with software teams and speak their language
- Relevant backgrounds may include AppSec, Product Security, Ethical Hacking/Offensive Security, DevSecOps, Secure SDLC, Penetration Testing.
- Experience with electronics, hardware or robotics would be useful but not essential.
This role does require a couple of days in the Gloucestershire office so we recommend only relatively local candidates should apply.
Location: Gloucestershire – hybrid, approximately two days on site per week
Contract: Outside IR35; initial six months with likely six-month renewals