Application Security Engineer/Experienced Pen Tester

ESO • TRAFFIC • Belfast, Not Specified, United Kingdom • 17h ago

How You'll Support Our Mission

ESO's teams are growing, and our software is in demand globally by firefighters, paramedics, hospitals and governments. To meet this demand, we are building an industry-leading cyber security team in Belfast to protect our customers and data from a variety of fast moving and constantly evolving threats.

We are looking for an Application Security Engineer to join our Belfast and US teams. Work alongside our fire, hospital and EMS to secure our mission-critical applications. These applications are used to help our customers go about their daily job of protecting their communities and saving lives.

You will refine our application design and protection using offensive security techniques like design assessment, research, threat intelligence, threat modelling, and controls optimization.

You will conduct security assessments of our applications, identify issues, and help address them early in the development cycle. You'll also support developers in improving coding practices to enhance security and assist with remediating findings from security assessments.

Our Security Engineering team operates autonomously within a motivated and forward-thinking Security team. Join our diverse, growing team, working on mission-critical products with training and mentoring support.

Joining our team will be an amazing and rewarding experience.

What You'll be doing - the day to day

Have significant impact on the security of our systems that are used by thousands of fire fighters, paramedics and hospitals worldwide.
Be a key part of our cyber security team, with demonstrable impact on the security of our systems and applications.
Conduct internal security assessments of APIs and Cloud infrastructure, validate controls, design across our estate, and lead remediation activities prioritization.
Enhance Secure Development by contributing to threat modelling, risk assessment, evolving Secure Coding Guidelines, and maintaining core security controls like SAST and DAST deployments.
Provide technical support with risk assessments on PHI, and steering improvements to our environment in line with common standards such as NIST.
Support External Penetration Testing and application vulnerability efforts, delivering assessments and prioritizing remediation activities across the organization.
Be across Threat Intelligence relevant to our industry and geographic regions, and translating that to real world defenses for us as an organization.
Work collaboratively cross-team, to impart your expertise across the organization.
Be in the detail, working shoulder-to-shoulder with our technology teams.

Who You Are - some of the essential things required to be successful in the role

At least 4 years' experience in securing software or infrastructure, penetration testing or pure product or application security
Strong expertise in offensive security techniques and methodologies, including ethical security testing
Deep understanding of secure coding practices, common vulnerabilities and risk scoring methodologies (OWASP Top 10, CWE, CVSS scoring etc.)
Strong experience communicating to stakeholders of varying technical skill levels
Your experience should include:
- Using offensive security tooling, including tools such as Burp Suite, Kali, Metasploit and such
- Scripting including the use of python, Powershell, bash or Javascript
- Securing networks, hosts, web applications and cloud native deployments
- Working with toolsets such as: vulnerability management, firewalls, SIEM, PAM, IDS/IPS, EDR/XDR, WAF
- Working with code security controls such as SAST / DAST / IAST / RASP
You should also:
- Have some knowledge in securing Continuous Integration / Continuous Deployment and associated practices
- Understand current attack tactics, techniques and procedures along with the use of MITRE Attack framework, as well as other more recent MITRE initiatives
- Be inquisitive, have a passion for what you do and understanding how your work impacts and contributes ESO's success

Who You Are - it's desirable if you have any of the following

Certifications such as OSCP or OSCP+, OSCE GPEN, OSWA, OSSTIMM or equivalents
Exposure to Infrastructure as Code and Azure native technologies
Experience with threat modelling, NIST and CIS frameworks

Experience working with and securing FHIR, HL7 APIs, medical applications or hardware

Benefits & Perks! You will have fantastic benefits at ESO including but not limited to;

Life insurance (4 x base salary)
Income protection insurance
A generous pension contribution
Private medical insurance including optical and dental
A health cash plan
Modern City Centre office and a flexible hybrid working policy
AwardCo Recognition Program
Enhanced paternity leave and pay, enhanced adoptive pay, enhanced maternity pay - 12 weeks full pay after 6 months' service.
Enhanced short and long-term sick pay
25 days holiday which increases year on year until you reach 5 years of service + 14 additional days

About ESO ESO is a fast-paced, growing data, technology and research company passionate about improving community health and safety through the power of data. We pioneer innovative, user-friendly software to meet the changing needs of today's EMS agencies, fire departments, and hospitals. We're small enough to be nimble and fun, but big enough to be a great place to work. We serve thousands of customers out of our offices across the US, Canada and Northern Ireland. Are you ready to Make a Difference? ESO is committed to creating a diverse and inclusive work environment and is proud to be an equal opportunity employer. We invite you to consider opportunities at ESO regardless of your gender; gender identity; gender reassignment; age; religious or similar philosophical belief; race; national origin; political opinion; sexual orientation; disability; marital or civil partnership status or other non-merit factor. Our Equal Opportunity Statement of Policy for Northern Ireland is available on request.

Applicant Privacy Notice - please click here to review the applicant privacy notice which details how your data is collected, used and protected.

Related Jobs

Software Engineer (C# / AWS)

MCS Group • TRAFFIC • Belfast, Not Specified, United Kingdom • 17h ago

Engineer Outside IR35

MCS Group is seeking an experienced C# / AWS Developer for a project-based role in Belfast. Role Overview: Develop and maintain applications using C# and AWS. Collaborate with cross-functional teams to deliver high-quali...

17h ago

Apply

Azure Cloud Engineer -Contract

VanRath • TRAFFIC • Belfast, Not Specified, United Kingdom • 5d ago

Engineer

Azure Cloud Engineer (Remote - Northern Ireland/Ireland) Daily Rate - negotiable Contract - 6 months initially About the Company: Join an innovative team working on cloud-based solutions with cutting-edge technology. VAN...

5d ago

Apply

Civil Infrastructure Design Engineer

Pertemps London Cambridge • TRAFFIC • Belfast, Not Specified, United Kingdom • £35,000 / day • 2w ago

Engineer

Civil Infrastructure Design Engineer Salary: £30,000 £40,000 Location: Belfast (Office-based for first 6 months, then hybrid) Are you an experienced Civil Engineer looking to take the next step in your career? This is an...

2w ago

Apply

Software Test Engineer - Contract

MCS Group • TRAFFIC • Belfast, Not Specified, United Kingdom • 2w ago

Engineer

MCS Group is working with a leading player in the financial services sector who are looking for a Senior Software Test Engineer to join their team on a 6-month contract basis. This is a fantastic opportunity for a season...

2w ago

Apply

13 May 2025 BBBH56921 Contract Software Engineer £90000 - £100000 per annum Belfast

MCS Group • TRAFFIC • Belfast, Not Specified, United Kingdom • £90,000 - £100,000 / day • 3w ago

Engineer

MCS Group has multiple contracts available for experience C# / AWS Developers in Northern Ireland! These Contract Software Developers will work across new critical client projects, working on everything from configuratio...

3w ago

Apply

Senior Arrears Case Consultant

Bank of Ireland • TRAFFIC • Belfast, Not Specified, United Kingdom • 6h ago

What is the opportunity? Be part of a thriving team supporting customers to ensure their financial needs are met. In this role you will: Contacting customers to understand their financial circumstances and make appropria...

6h ago

Apply

AWS Cloud Architect

e-Careers Limited • TRAFFIC • Belfast, Not Specified, United Kingdom • 12h ago

Architect

Take your first steps towards a new and exciting career in Cloud Computing. e-Careers is a dynamic and forward-thinking training company that is dedicated to changing lives through innovative training solutions. The mark...

12h ago

Apply

Accounts Assistant

Hays • ATS • Belfast, Not Specified, United Kingdom • £14 / day • 15h ago

Finance Officer - Belfast - 6 month placement Your new company Hays are delighted to be working with a well established charity to help recruit for a Finance Officer for a period of 6 months. Your new role Your new role...

15h ago

Apply

Associate Director of Recruitment (Technology Sector)

VanRath • TRAFFIC • Belfast, Not Specified, United Kingdom • 17h ago

Associate Director of Recruitment (Technology Sector) Join Northern Ireland's Highest Rated Agency! £100k + salary Belfast VANRATH is Northern Ireland's leading specialist recruitment consultancy, established over 20 yea...

17h ago

Apply

SAP ISU consultant (functional)

Experis - ManpowerGroup • TRAFFIC • Belfast, Not Specified, United Kingdom • 17h ago

Role: SAP ISU consultant - Functional Client sector - Utilities Location: Belfast (Hybrid) Duration: 12 Months Day rate: £600 - £700 inside IR35 (Negotiable) Role Description: Upgrading the current SAP systems to the lat...

17h ago

Apply