Senior Application Security Engineer

LearnUpon is looking for a Senior Application Security Engineer to join our team in Dublin.

LearnUpon LMS helps organizations train their employees, partners, and customers. Businesses can manage, track, and achieve their unique learning goals — all through a single, powerful solution.

With offices in Dublin (our HQ), Philadelphia, Utah, Belgrade, and Sydney, we are a team that puts our customers at the heart of everything we do. We always act like an owner, lead with curiosity and strive to deliver quality on everything that we do.

Our offices are open, collaborative environments where our team and individual accomplishments are celebrated and encouraged. Join LearnUpon, where we work together as a friendly, supportive team who, most importantly, like to have fun. 

What will I be doing?

• Overseeing the delivery and improvement of our internal security testing program
• Act as a security consultant to Engineering teams, advising on application security best practice, secure design principles and security architecture.
• Initiate and work with Engineering to deliver security improvements within our application operating environment.
• Oversee the design and delivery of targeted developer security awareness training.
• Researching, implementing and maturing tools to continuously improve and automate our application security posture
• Work with Engineering teams so that security requirements are incorporated into the design of new application features.
• Work closely with teams to identify vulnerabilities and risks in our application and supporting environments
• Manage the security aspects of our SDLC process.
• Mentor junior members of the team to ensure a minimum baseline of expertise in the team.
• Act as a security champion and support other teams in the delivery of strong security practices

What skills do I need? 

• 5+ years of professional experience in a web application security role.
• Experience in the implementation and operation of common application security tools (e.g. DDoS protection, SAST, application security monitoring, web application firewalls, etc.)
• Development and delivery of developer-focused security awareness training programs
• Experience in security test automation
• Knowledge of current / popular web application vulnerability / attack vectors including, but not limited to, OWASP Top 10.
• Experience designing and incorporating security controls into SDLC workflows
• A strong understanding of common web application architectures and concepts (e.g. XHR requests, CORS, CDNs, etc.).
• The ability to articulate technical risk to a non-technical audience
• Excellent written and verbal communication skills
• Strong stakeholder management

Don’t worry if you don’t tick every box in order to apply, we’re always happy to review applications and take all experience into consideration. We do our best to provide feedback where we can!

Not required but considered a big plus

• Understanding of cloud security concepts and demonstrable experience working in cloud environments (AWS in particular)
• Experience in web application and infrastructure penetration testing
• Experience performing secure code reviews
• Experience developing and applying security patterns and principles to ensure the secure design of systems
• Familiarity with Ruby on Rails and Go
• A Bachelors Degree in a relevant discipline (e.g. computer science, engineering)
• One or more security certifications such as EC Council Certified Ethical Hacker (CEH), OSCP, GWAPT

Why Work With Us?

• Work in a fun and supportive environment with regular team events
• Excellent career progression - take LearnUpon where you think it can go
• Structured learning environment
• Competitive salary and company ESOP
• Employer contributed pension
• Private health insurance
• 25 days annual leave + 1 annual company wellness day off

What is the Hiring Process?

Applicants for the position can expect the following hiring process:

• Qualified applicants will be invited to schedule a 30-minute call
• Successful candidates will then be invited to a series of practical interviews
• Finally, candidates will have a short interview with our C-Suite
• Successful candidates will be contacted with an offer to join our team

LearnUpon is an Equal Opportunities Employer. We do not discriminate on the basis of gender, marital status, family status, age disability, sexual orientation, race, religion, membership of the Traveller community, or any other legally protected status.

By applying for this job, you agree to LearnUpon's Privacy Policy. Find out more about our privacy policy here.

Visit our Careers site to find out more about working for LearnUpon, and check us out on Instagram.