Senior Application Security Engineer, Experian
+ Discretionary bonus plan & Sharesave scheme
Free credit check, score, and report
Be an early applicant
Free credit check, score, and report
1001+ employees
Be an early applicant
+ Discretionary bonus plan & Sharesave scheme
1001+ employees
Company mission
We’re focused on a clear purpose — to create a better tomorrow for consumers, for businesses, for our communities and for our people. It's our mission to improve financial inclusion. By improving access to financial services, we empower people to unlock opportunities and transform their lives.
Role
Who you are
- Direct experience in enterprise-level application security
- Experience in AppSec or DevSecOps, collaborating and presenting to developers, supporting development teams to adopt and mature secure development practices
- Proficiency with SAST, SCA, DAST, IAST, RASP and others tools associated with DevSecOp
- Experience with programming and software development including CI/CD pipelines and related technologies such as Git, Jekins, Maven, Chef, Puppet, Ansible, Nexus, Artifactory and NPM
- Experience overseeing the linking of applications between different departments and systems
- Understanding of MITRE, OWASP, SafeCode and risk management methodologies as they relate to integration/software testing
- Good project management skills or substantial exposure to project-based work structures, project lifecycle models,
- Knowledge of cloud and GenAI security is an advantage
What the job involves
- Experian, Global Security Office are looking for an experienced Senior Application Security Engineer to enhance our application security processes with emphasis on business engagement
- You will be responsible for static, SCA, and dynamic scanning, collaborating with software engineers, provide flaw mitigation recommendations, and implementing automated security controls throughout the development lifecycle and CI/CD pipelines
- Ensure the Software Security Policy and Baseline requirements are met for new Agile deliveries and for legacy estate with flaws and issues managed throughout all stages of an applications' life
- This is a remote UK-based position reporting to the Manager of Application Security
- Collaborate with software engineers and leadership to address security risks and provide mitigation recommendations within the Secure Development Lifecycle (SDLC)
- Work with development teams to understand their needs and the risk profile for each application and customize solutions to meet the needs of the application
- Collaborate on the implementation and management of SAST, SCA, DAST, and other scanning solutions to provide coverage for the application portfolio
- Guide development teams through a review of their applications and risks against common application flaws (e.g., OWASP Top 10) and provide prioritized visibility to senior management along with context
- Operate as an advocate for Security in interactions with internal and external teams
- Work with Risk & Compliance teams on audits (e.g., SOC 2, PCI-DSS, HIPAA) and recommend relevant Application Security policy and procedures
- Contribute to internal and external/client audits, ensuring compliance with security standards
- Lead projects to implement security technologies enterprise-wide
- Integrate 3rd party and build custom solutions into our CI/CD pipelines and development cycles
- Define security guardrails through automated tool policies, Service level agreements, custom rules, and support the developer community
- Support the enterprise in managing vulnerabilities through automated tooling and security assessments
- Work with Security Champions to build relationships and ensure main activities are supported and deliverables are achieved promptly
Our take
Experian is one of the world's leading data and technology companies, best known for helping people and businesses understand and improve their credit. With free credit reports and tools that let users boost their score using everyday bills, Experian is making managing money a whole lot easier.
It's a powerhouse of a company too, operating in 32 countries and boasting an employee count of over 24,000. And its reach stretches across industries, helping lenders make fairer decisions, supporting healthcare teams in preventing fraud, and guiding businesses to use data more intelligently. It's a trusted name at the very heart of how the world uses data to make smarter financial decisions.
It's also investing in new technologies and ideas to make finance even fairer and faster. As data becomes more important in our digital lives, Experian's focus on innovation and transparency will surely keep helping people take control of their financial stories.
Steph
Company Specialist at Welcome to the Jungle
Insights
Company
Company benefits
- Hybrid working
- Flexible working
- Discretionary bonus
- Pension
- Bupa Healthcare
- Sharesave Scheme
- 25 days annual leave with 8 bank holidays and 3 volunteering days. You can purchase additional annual leave
- Discounted gym membership
- Discounted dental cover
Company values
- Working with integrity - We know that trust isn’t given, it’s earned. We’re committed to working with integrity and operating responsibly in every facet of our business. At Experian, that means treating our data, our people and our environment with respect.
- Treating data with respect - We handle the data of 1.3 billion people and 166 million businesses worldwide, so it’s essential to our business that we maintain their trust. Ensuring that we collect, store and manage data safely and responsibly is fundamental to our success.
- Investing in our community - We’re committed to investing our time, resources and partnerships to create a better tomorrow for our community.
- Unlocking the power of data - Data has the power to transform lives for the better, so we're leveraging new technologies and innovative products to do just that.
Company HQ
Nottingham, UK
Articles
Leadership
Brian Cassin
(CEO)Previously the Chief Financial Officer of Experian and, before that, Managing Director at Greenhill & Co., Brian served for nine years as a non-executive director of J Sainsbury plc. He has also held various senior roles at Baring Brothers International and the London Stock Exchange.
Share this job
View 23 more jobs at Experian