Contribute to the target architecture for secure software development, aligned to Colt’s Secure by Design principles
Support the integration of security controls into CI/CD pipelines (GitLab), including automated testing and policy enforcement
Design and implement application security controls, including
Static Application Security Testing (SAST)
Dynamic Application Security Testing (DAST)
Software Composition Analysis (SCA) / dependency scanning
Secrets and credentials scanning
Work with engineering teams to ensure consistent adoption of DevSecOps practices and secure coding approaches
Support security architecture reviews and assurance activities for internally developed applications and services
Identify and help reduce risks related to application vulnerabilities, insecure coding practices and exposed credentials
Support the coordination and execution of third-party penetration testing of Colt’s internet-facing applications
Assist in defining test scope, tracking execution and ensuring remediation of findings is properly managed
Provide guidance to engineering teams on remediation and prioritisation of vulnerabilities
Contribute to the development and maintenance of secure coding standards and architectural patterns
Ensure alignment with regulatory requirements such as TSA, DORA and ISO27001 in application design and deployment
Promote a security-first culture within development teams, including awareness and best practices
Maintain awareness of emerging risks and technologies, including basic AI/LLM-related application risks, and support translation into practical controls where required
Produce and maintain architecture artefacts, standards and guidance documentation
What we're looking for
Must haves
5+ years of experience in information security, with a strong focus on application security and DevSecOps
Strong understanding of secure software development practices and common application security risks (e.g. OWASP Top 10)
Hands-on experience working with or integrating DevSecOps tooling within CI/CD environments (e.g. GitLab pipelines)
Experience with application security testing tools and practices, including: SAST, DAST, SCA / dependency scanning and Secrets / credentials scanning.
Experience contributing to security design reviews for applications and APIs
Experience supporting or participating in penetration testing activities, including remediation tracking
Strong understanding of modern application architectures (e.g. APIs, microservices, cloud-native applications)
Knowledge of authentication and session management concepts within applications
Experience performing or supporting risk assessments aligned to recognised frameworks
Ability to translate technical vulnerabilities into business-aligned risk and remediation actions
Strong collaboration skills with engineering and development teams
Strong communication skills (technical and non-technical)
Might haves
Experience with GitLab security tooling and pipeline integrations
Familiarity with cloud-native application security (Azure / GCP environments)
Exposure to API security controls and testing approaches
Basic understanding of AI/LLM application risks, such as prompt injection or data exposure
Experience working within regulated environments (telecommunications, financial services, critical infrastructure)
Understanding of Telecoms Security Act (TSA) requirements in application design
What we offer you
Looking to make a mark?
At Colt, you’ll make a difference. Because around here, we empower people. We don’t tell you what to do.
Instead, we employ people we trust, who come together across the globe to create intelligent solutions.
Our global teams are full of ambitious, driven people, all working together towards one shared purpose: to put the power of the digital universe in the hands of our customers wherever, whenever and however they want.
We give our people the opportunity to inspire and lead teams, and work on projects that connect people, cities, businesses, and ideas. We want you to help us change the world, for the better.
Diversity and inclusion
Inclusion and valuing diversity of thought and experience are at the heart of our culture here at Colt. From day one, you’ll be encouraged to be yourself because we believe that’s what helps our people to thrive. We welcome people with diverse backgrounds and experiences, regardless of their gender identity or expression, sexual orientation, race, religion, disability, neurodiversity, age, marital status, pregnancy status, or place of birth.
Most recently we have
Signed the UN Women Empowerment Principles which guide our Gender Action Plan
Trained 60 (and growing) Colties to be Mental Health First Aiders
Please speak with a member of our recruitment team if you require adjustments to our recruitment process to support you. For more information about our Inclusion and Diversity agenda, visit our DEI pages.
Benefits
Our benefits support you through all parts of life, for both physical and mental health.
Flexible working hours and the option to work from home.
Extensive induction program with experienced mentors and buddies.
Opportunities for further development and educational opportunities.
Global Family Leave Policy.
Employee Assistance Program.
Internal inclusion & diversity employee networks.
A global network
When you join Colt you become part of our global network. We are proud of our colleagues and the stories and experience they bring – take a look at ‘Our People’ site including our Empowered Women in Tech.
