Job Description
Job Title: Application Security Test Engineer
Location: Hemel Hempstead UK / Hybrid
BSI have a fantastic career opportunity for an individual looking to develop a rewarding career within the cyber security regulatory industry.
Our testing teams are responsible for testing a wide range of products to ensure they meet stringent security standards and certification requirements. You will have the opportunity to test a wide range of products from our global clients, including big tech.
Working within the regulatory landscape you will have the opportunity to keep abreast of the latest regulatory requirements, develop your expertise, and research new testing techniques to further expand our testing capabilities.
As our Application Security Test Engineer, you be responsible for testing client mobile and web software applications in accordance to OWASP (ASVS/MASVS) frameworks. To be successful in this role you’ll need to hold an understanding web application vulnerabilities and black-box/white-box testing techniques.
Responsibilities:
- Perform product testing of software applications (Web & Mobile).
- Assist to maintain and improve testing techniques for the IoT and Digital Apps laboratory.
- To research and identify new potential test equipment /software tools for the IoT laboratory and Digital Apps laboratory.
- To provide technical assistance with BSI customers, during any potential testing and certification journey.
- To manage and own all assigned test projects to ensure that agreed timelines are met for the testing of samples.
- To Prepare Test Reports for clients and deliver on time as agreed in Operational Plan.
- Lead project, assessment and/or evaluation teams as required.
- Proactively identifies and represents BSI’s interests with external bodies (e.g., industry associations, standards committees and notified body working groups).
- Proactively identifies new and/or amended product standards/directives and ensures BSI’s testing schemes are kept up to date and relevant to current market needs.
- Work with Compliance and Risk team to ensure that the specific products offered in this area by BSI meet all regulatory requirements and that BSI is represented at necessary meetings, committees, etc.
- Attendance at trade shows, trade and relevant technical committee meetings and there may be a requirement for occasional overseas travel.
- Maintaining CREST OVS Level or equivalent qualification.
To be successful in the role, you will have:
- Knowledge of web application security principles, standards, and best practices, such as the OWASP Top 10, the OWASP Mobile Application Security Verification Standard (MASVS), and the OWASP Application Security Verification Standard (ASVS).
- Experience in performing security testing of web/mobile applications and web services, using both manual and automated tools.
- Proficiency in one or more programming languages, such as Python, Ruby, Java, or C#, , JavaScript, PHP, or Perl.
- Familiarity with web application development frameworks, such as Django, Rails, Spring, or ASP.NET, and web technologies, such as HTML, CSS, XML, JSON, or REST.
- Ability to write clear and concise reports, documenting the parameters, conditions and outcomes of testing activities.
- Understanding business requirements and applying security without adversely affecting the desired functionality.
- Performing manual code reviews, open-source software evaluations, and tests as needed.
- Previous experience in the Testing, Inspection and Certification (TIC) sector would be preferred.
- Relevant degree such as bachelor’s and master’s degree in computer science, Engineering, Information Security, Technical, Information Technology, Management, Science, Architecture, Technology.
- High level of interpersonal skills with the proven ability to communicate and influence effectively at all levels.
- Organised, efficient and methodical in approach, with high attention to detail.
- Proven experience of managing projects and its resources.
- Ability to solve problems proactively.
- Candidates must hold full rights to work & remain in the UK as sponsorship is not available for this position.
BSI offers a competitive total reward package, an independent and varied job in an international environment, flexible working hours, ongoing training and development with the inclusion of Annual Bonus, Contribution Based Pension, Private Healthcare, 27 Days Annual Leave + Bank Holidays, Life Assurance.
Do you believe the world deserves excellence?
We are proud to be the business improvement company for other organisations to become more sustainable and resilient and finally to inspire trust in their products, systems, services, and the world we live in.
Headquartered in London, BSI is the world's first national standards organization with more than 100 years of experience. We are a global partner for 86,000 companies and organizations in over 193 countries, offering development, auditing, certification, and training services, including innovative software solutions and cyber security expertise for all industries: from aerospace and automotive to food, construction, energy, healthcare, IT and trade sectors. Incorporated by Royal Charter, we’re truly impartial, and home to the ultimate mark of trust, the Kitemark.
Through our unique combination of consulting, training, assurance and regulatory services we bring solid and broad knowledge to every company.
If you want to contribute to this inspiring challenge, bring your open and enthusiastic mindset to our dynamic team, apply now and become part of the BSI family!