Support and advance the application security program: review designs and architecture, advise engineering/DevOps on secure SDLC practices, run static/dynamic scans and manual assessments, triage external pentest and bug-bounty findings, and drive security process improvements.
About Intermedia
Are you looking for a company where YOUR VOICE is heard? Where you can MAKE A DIFFERENCE? Do you THRIVE in a FAST-PACED work environment? Do you wake every morning EXCITED to work with GREAT PEOPLE and create SUCCESS TOGETHER? Then Intermedia is the place for you.
Intermedia has established itself as a leading provider of cloud communications and collaboration tech that allows companies to connect better. We have a strong track record of growth, profitability, and creating an environment where everyone matters. Everyone. While we are fast-paced and admittedly a bit intense, we promise that you won’t be bored. You will find Intermedia is a place where you can indulge your passion for creating and supporting great cloud technology. What’s more, we always look to promote from within and have many employees who have been with us 10, 15, and 20+ years!
Culture at Intermedia is built on teamwork and transparency. We hold each other accountable and always have each other’s back!
Are you ready to make your mark?
About the Role
Intermedia has a wide portfolio of internally developed application software, ranging from web and desktop apps to lower level PBX solutions. Due to the growing demand for integrating security activities into diverse development processes, Intermedia is looking for an experienced and self-motivated Application Security Engineer to help us deliver built-in security to our products.
As part of the Global Security team, you will support our company wide application security program, helping the company build secure products. You will be the voice of security for all things related to application security to our spectrum of engineering teams, guiding the architecture and execution of our SDLC throughout the enterprise. This position is an individual contributor role, reporting directly to the Manager, Application Security.
What you will be doing:
- Perform design and architecture review of new features, suggest security requirements
- Collaborate with DevOps and engineering teams, advising on security features and best practices in SDLC
- Utilize static security scanning tools, review findings and coordinate remediation actions
- Perform ongoing manual security assessments
- Review the results of external penetration tests and communicate suggested fixes to development teams
- Provide on-demand support on application security topics
- Drive process improvement ideas
- Assist with vetting and intake of defects from 3rd party security researchers via our Bug Bounty program
What you will bring to the role:
- 3 - 5 years of experience in the application security field
- Bachelors or Master Degree in related field of expertise
- Knowledge of secure coding best practices and industry standards (such as OWASP) and the ability to apply them to different programming languages
- Familiarity with SDLC and DevSecOps concepts and hands-on experience in implementing them
- Knowledge and/or hands on experience with identifying A.I. threats in a security landscape
- Experience in using static and dynamic security scanning tools (such as BurpSuite, ZAP, and Snyk, or other related technologies)
- Experience with programming languages such as Python is preferred
- Ability to explain application security threats and mitigation options to both developers and project managers
- Good communication skills in written and verbal English
- Experience and/or knowledge in securing applications within cloud platforms (AWS, Azure) and containerized environments (Docker, Kubernetes)
- Participation in CTF challenges and bug-bounty programs
Diversity, Inclusion, and Equal Opportunity
We hire, promote, and compensate employees based on their ability to perform their job responsibilities, without regard to race, color, creed, religion, sex, gender, marital status, national origin, ancestry, age, citizenship, physical or mental disability, sexual orientation, or any other basis protected by applicable law (collectively referred to in our Code of Conduct as “Protected Classes”). We do not tolerate employment discrimination in the workplace, and we are committed to making reasonable accommodations for identified disabilities or other limitations as required by all applicable laws. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
About
To explore other opportunities check out our careers page: https://www.intermedia.com/about-us/careers
Similar Jobs
Hardware • Information Technology • Other • Software • Analytics
Lead global SCA and SAST strategy and tooling, integrate static and open-source scanning into CI/CD pipelines, reduce false positives, perform threat modeling and architecture reviews, mentor teams, and drive developer-first application security across diverse tech stacks.
Top Skills:
.NetAzure DevopsC#Ci/CdGithub ActionsGitlab CiGoJavaJenkinsLicense ComplianceOpen-Source SecurityPythonSastSca
Information Technology • Legal Tech • Analytics
Lead embedding security into software delivery by partnering with engineering teams to improve CI/CD security, triage and remediate findings, design secure-by-default patterns, automate security validation and evidence generation, facilitate threat modeling, and provide reusable templates and guidance to reduce risk at scale.
Top Skills:
Automated Security ToolingCi/CdIdentity And Access ManagementSecrets ManagementSecurity AutomationThreat Modeling
Artificial Intelligence • Healthtech • Information Technology • Other • Analytics
Embed security into software delivery by partnering with engineering teams to improve CI/CD pipeline security, triage and remediate findings, perform threat modeling, design secure-by-default patterns, build reusable templates and automation, support compliance and audit evidence, and communicate security standards and best practices.
Top Skills:
Automated Security ToolingCi/CdIdentity And Access ManagementSecrets ManagementSecurity AutomationThreat Modeling
What you need to know about the London Tech Scene
London isn't just a hub for established businesses; it's also a nursery for innovation. Boasting one of the most recognized fintech ecosystems in Europe, attracting billions in investments each year, London's success has made it a go-to destination for startups looking to make their mark. Top U.K. companies like Hoptin, Moneybox and Marshmallow have already made the city their base — yet fintech is just the beginning. From healthtech to renewable energy to cybersecurity and beyond, the city's startups are breaking new ground across a range of industries.
