Application Security Specialist

Job Description

Why Noventiq? Do you want to contribute directly to successful business outcomes by driving digital transformation for its customers’ businesses, connecting 75k organizations forward in a secure way? Are you motivated to evolve the global best practices within all sectors with hundreds of best-in-class IT vendors, alongside its services and solutions? Noventiq Is a Leading Global Solutions And Services Provider Founded in 1993 Headquartered in London, UK Revenue of $ 2.1 billion Headcount of 6400 employees Partnering with Microsoft, IBM, Oracle, Google, AWS and up to 500 other vendors Operating in roughly 60 countries 16 strategic acquisitions What's in it for you? Here you will collaborate with multi-national teams, ameliorate to a bazillion of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow, capable of taking on more significant responsibilities and leadership roles. This can be invaluable in understanding and serving clients from different regions, making the company truly expand its presence in new markets, bringing a profound positive repercussion to the business. Now we are looking for an Application Security Specialist , you will be a part of our Global Delivery team. Job Overview: As an Application Security Specialist, you’ll play a vital role in building secure systems from the ground up. Working closely with engineering, compliance, and DevOps teams, you will ensure our applications meet rigorous security and regulatory standards across global jurisdictions. Your Impact On The Mission Integrate security into the Software Development Lifecycle (SDLC), embedding security controls at every phase. Conduct threat modeling, secure code reviews, and penetration testing for internal and third-party applications. Collaborate with development teams to address security issues across CI/CD pipelines (DevSecOps). Manage and mitigate application-level risks in line with security frameworks and regulatory requirements. Support compliance efforts for GDPR, NIS2, PCI-DSS, and DORA by applying security controls and maintaining evidence. Drive secure practices in the software supply chain, improving defenses against attacks like those seen in SolarWinds. Business Impact Reduces application security vulnerabilities across internal and customer-facing systems. Helps ensure Noventiq’s compliance with global cybersecurity regulations. Lowers production defects and remediation costs through early detection. Strengthens resilience of cloud-native and third-party platforms. About What You’ll Bring to The Table – About You: 5 years in Application Security, including secure development, testing, and DevSecOps. Solid understanding of OWASP Top 10, SAST/DAST, threat modeling, and common attack vectors. Familiarity with CI/CD environments (e.g., GitLab, GitHub Actions, Azure DevOps). Hands-on experience with tools such as Burp Suite, OWASP ZAP, SonarQube, Checkmarx, or similar. Preferred Certifications Industry-recognized certifications are a plus, including: OSCP , GWAPT, CISSP, or CSSLP Bonus for Azure Security Engineer (AZ-500) or Certified DevSecOps Professional Frameworks & Compliance Working knowledge of: OWASP , CIS Controls v8, ISO/IEC 27001 GDPR , NIS2 Directive, PCI-DSS, DORA Regulation How To Apply If you would like to apply, please click on the button or send an email with your CV attached to the TA Team. If you would like an informal chat before applying, please feel free to contact TA directly on LinkedIn or the same email address. Show more Show less