Secure Coding Engineer

This is a hands-on role at the intersection of software development and application security. You’ll work directly with developers, analyse security findings, improve security tooling and standards, and help the organisation respond to emerging risks such as AI-driven attacks and agentic development.

Responsibilities include: maintain and improve the bank’s secure software development posture; maintain and develop Secure Coding Standards; triage and analyse findings from SAST and SCA tools, such as Fortify and Nexus Lifecycle; analyse and prioritise vulnerabilities and explain their impact to development teams; support developers in understanding and resolving security findings in their code; fine-tune security rulesets to reduce false positives and improve the quality of findings; contribute to internally developed security tooling, including the Repository Scanner (RESC); help assess and address emerging security risks, including AI-driven attacks and agentic development; share knowledge, guidance and best practices with development teams across the bank.

The role is varied: one day you may be analysing code and security findings, while the next you may be working with developers on a solution or improving the tooling used across the organisation. What we’re looking for: Experience in secure coding and/or application security; Strong software development experience in at least one programming language; Experience with SAST and SCA tools, such as Fortify, Nexus Lifecycle, or similar; Experience analysing, triaging and prioritising software security findings; Ability to work comfortably with developers and translate security concepts into practical solutions; Strong communication skills and the ability to explain technical security topics clearly; Experience working effectively within a large corporate environment; Fluent in English.