Security Test Engineer, Tech Alchemy
Office located in Paul Street, London
Software design and development studio
Job no longer available
Software design and development studio
101-200 employees
Job no longer available
Office located in Paul Street, London
101-200 employees
Company mission
To design and develop digital products and services that drive real business value and improve customer experiences.
Role
Who you are
- Demonstrated expertise in roles such as Security Test Engineer, Security Tester, Penetration Tester, VAPT or similar positions, with a track record of 3+ years
- Practical hands-on familiarity with a wide array of security testing tools and methodologies
- Thorough understanding of industry-standard security frameworks and best practices, including OWASP Top Ten and SANS Top 25
- Competence in utilizing tools such as Burp Suite, Nmap, Nessus, Nexpose, and the MetaSploit framework
- Proficiency in assessing the security of Android and iOS mobile applications through the application of static and dynamic testing tools, including Santoku, Burp Mobile Assistant, apktool, and others
- Proven experience in executing comprehensive security assessments, encompassing penetration testing, meticulous analysis of tool-generated results, vulnerability scanning, and rigorous code review
- Proficiency in the analysis of tool-generated results, execution of Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST), manual code review, active support in remediation efforts, and the review of open-source components
- Adeptness in scripting and a strong grasp of application security principles
- Excellent verbal and written communication skills to collaborate with cross-functional teams and convey security findings and recommendations
Desirable
- Possession of relevant certifications such as OSCP (Offensive Security Certified Professional), eWAPT (eLearnSecurity Web Application Penetration Tester), CEH (Certified Ethical Hacker), and ECSA (EC-Council Certified Security Analyst)
- Familiarity with threat intelligence sources and the ability to incorporate threat intelligence into security testing practices
- Understanding of DevSecOps principles and the ability to integrate security testing into the software development lifecycle
- Willingness and ability to stay updated with the latest security threats, vulnerabilities, and testing methodologies
- Familiarity with Agile processes facilitated through tools like JIRA and Confluence
What the job involves
- As a member of the Tech Alchemy team, you will be exposed to exciting startup projects across many industries such as Finance, Health, Hospitality, Agriculture, and others
- You should combine technical, communicative, and analytical skills and also enjoy mentoring junior staff, code reviewing, and engineering culture
- Identify and assess security vulnerabilities in software web applications, APIs and mobile applications
- Ensure compliance with industry-standard security practices across all the projects
- Present reports and recommendations from findings, including security issues and level of risk
- Work in a fluid Agile process, with a sprint-based focus on accurate estimations, quality deliverables, and responding to feedback
Salary benchmarks
Our take
Tech Alchemy is a startup development company, believing that early start-ups need individual, hands-on attention in order to scale. Its purpose is to help technology-focused startups successfully launch products and scale locally and globally.
Tech Alchemy differentiates itself by only working with a handful of carefully selected start-ups (a maximum of six projects per year). This means it is able to be highly involved in operations and provide clients with individual attention day in and day out.
Due to the effectiveness of its services, client projects built through Tech Alchemy have helped raise over £75M, and has been featured by Apple, Amazon and BBC. If the company continues with its approach, it is likely to facilitate the successful development of many more companies.
Steph
Company Specialist at Welcome to the Jungle
Insights
Company
Company benefits
- Flexible Working: We value work-life balance highly, therefore we have flexible working hours
- Company Issued Tech: We offer allowances for course, conferences or anything else to help you progress
- Health and Wellbeing: comprehensive private health benefits
- Holiday: 25 days annual leave + bank holidays and your birthday off
- Work-life Balance: Team members have the freedom and flexibility to organise their own work schedules with a high degree of autonomy in your role
Company HQ
London, UK
Leadership
Soham Trivedi
(Co-Founder)Former Technical Advisor at Serendipity for 6 months and CTO at TOAD.ai for 2 years.
Share this job