AppSec Consultant (Security Design)

At ASB, we're committed to building secure, resilient technology that enables our customers to bank with confidence. As we continue to strengthen our cyber security capability, we're looking for an experienced AppSec Consultant (Security Design) to help embed Security by Design practices across our technology landscape. This is an exciting opportunity to influence the way solutions are designed, work closely with architects and engineering teams, and help ensure security is considered from the earliest stages of delivery. About the Team The Cyber Assurance Team sits within ASB's Security Practice and plays a critical role in helping protect the bank, our customers and our technology platforms. Combining penetration testing, application security and secure design expertise, the team works alongside engineers, architects and delivery teams to identify security risks early, uplift security capability and embed secure practices across the software development lifecycle. From validating code vulnerabilities through to threat modelling and ethical hacking, the team helps ensure security is built into everything we do. About the Role As an AppSec Consultant (Security Design), you'll focus on identifying security risks before solutions are built. Working alongside architects, engineers and delivery teams, you'll provide expert guidance on secure solution design, facilitate threat modelling activities and help teams make informed security decisions. You'll play an important role in bridging the gap between architecture and security, providing practical advice that enables delivery teams to build secure, scalable and resilient solutions. Key Responsibilities Lead security design reviews across technology initiatives and platforms Facilitate threat modelling activities and identify security risks early in the delivery lifecycle Provide practical Security by Design guidance to engineering and architecture teams Review solution designs and recommend appropriate security controls and mitigations Produce and maintain security design documentation and artefacts Support technical risk assessments and security decision-making Partner with engineering, architecture and delivery teams to improve security outcomes Coach and uplift capability across technology teams and emerging security champions Contribute to the development of security patterns, standards and best practices Identify opportunities to continuously improve secure design practices across ASB About You You'll be a security professional who enjoys solving complex problems and influencing outcomes through collaboration. You'll have a strong understanding of security principles and enjoy helping teams build secure solutions without slowing delivery. Key Skills and Experience Strong understanding of Threat Modelling and Security by Design principles Experience identifying security risks within solution or systems design Knowledge of threat modelling frameworks such as STRIDE Experience working with architecture, engineering or security teams in complex environments Understanding of cloud technologies such as Azure or AWS Ability to assess security risks and recommend appropriate mitigations Strong stakeholder engagement and communication skills Experience producing technical documentation, security assessments or design artefacts Understanding of application security concepts and software development practices Experience in Security Consulting, Security Architecture, Cloud Security, Application Security or a related discipline Working for ASB At ASB, we know that great people drive great outcomes. That's why we provide a supportive environment where you can grow your career, work with talented people and make a real impact. Some of our benefits include: Flexible and hybrid ways of working Additional leave benefits including ASB Bank Holidays Health, life and income protection insurance Banking benefits and product discounts Generous parental leave support Learning and development opportunities Employee banking packages and financial wellbeing support Access to wellbeing initiatives and employee assistance programmes To serve a diverse community, we need a diverse organisation. We encourage applicants from allbackgrounds who bring unique perspectives and thinking styles that add to the culture andperformance of our team. #J-18808-Ljbffr