We are looking for an experienced Application Security Specialist to join our Cyber team, focusing on supporting our application security and risk management program. You will help build world-class security automation and remediation plans by working closely with key stakeholders in the Games teams to provide clear plans and support risk remediation through data-driven analysis and practical engagement.
What you'll be doing:
* Provide guidance on security best practices, compliance, and undertake security testing.
* Collaborate with architecture and development teams to review design and code for security vulnerabilities.
* Embed and improve security threat modeling and secure coding in the development lifecycle.
* Provide technical advice to ensure security standards are understood and followed.
* Develop security testing plans and integrate them into the software development lifecycle.
* Perform and oversee security testing, managing remediation of vulnerabilities.
* Handle reported vulnerabilities as part of the bug bounty program.
* Participate in the security incident response team.
* Monitor and report on current threats and vulnerabilities.
* Prepare and track application security metrics and KPIs.
* Automate processes for detecting and monitoring platform security, integrating security tools into the S-SDLC.
Note: This position requires participation in an on-call rotation.
Minimum requirements:
* At least 3 years of experience in software engineering.
* At least 2 years of experience in application security.
* Deep knowledge of application security vulnerabilities, testing techniques, and OWASP framework.
* Strong communication and influencing skills, capable of building relationships across the organization.
* Understanding of secure web application development.
* Experience with web application and Agile development methodologies.
* Comprehensive knowledge of IT and information security.
* Experience promoting security awareness.
* Ability to work independently and prioritize workload effectively.
* Experience collaborating with the hacker/pen-testing community.
About Jagex:
Jagex is a leader in developing and publishing engaging online games connecting millions worldwide, known for RuneScape and other successful franchises. We foster an inclusive workplace built on trust, autonomy, and shared passion. Our values include collaboration, continuous learning, honesty, customer focus, and seizing opportunities. With over two decades of experience and a diverse team of over 400, we continue to innovate and prioritize player-first game design.
Perks & Benefits:
* Private Healthcare, including Dental.
* Minimum 6% Pension contributions.
* Employee Assistance Program & onsite counseling.
* Life Insurance.
* Discretionary annual performance bonus.
* Enhanced family leave policies from day one.
* Flexible working hours.
* 25 days annual leave plus bank holidays, with buy/sell options.
#J-18808-Ljbffr