Description Associate, Application Security Engineer About Alvarez & Marsal Alvarez & Marsal (A&M) is a global consulting firm with over 10,000 entrepreneurial, action and results-oriented professionals in over 40 countries. We take a hands-on approach to solving our clients' problems and assisting them in reaching their potential. Our culture celebrates independent thinkers and doers who positively impact our clients and shape our industry. The collaborative environment and engaging work-guided by A&M's core values of Integrity, Quality, Objectivity, Fun, Personal Reward, and Inclusive Diversity-are why our people love working at A&M. The Team With the growth of the business globally we are expanding our Global Security Office (GSO) and are looking to recruit an Application Security Engineer to join the team in London or Tampa. In this role, you'll play a critical part in securing the software that powers our business by embedding security into every phase of the development lifecycle. You'll work side-by-side with security analysts, engineers, and developers to proactively identify, assess, and remediate application-level threats. As a core member of the cybersecurity function, you'll be responsible for helping the organization build secure, resilient systems and ensure that our applications withstand the evolving threat landscape. Reporting to the GSO Security Engineering Manager, you will come from a secure development testing background with experience in: * Application security, software development and penetration testing. * Proficiency in secure coding practices and vulnerability mitigation techniques. * Strong grasp of web application security concepts (e.g., OWASP Top 10, CWE, SANS). * Using security tools such as Burp Suite, OWASP ZAP, Snyk, Veracode, etc. * Familiarity with CI/CD pipelines and integrating security testing into DevOps. * Hands-on experience with at least one programming language (e.g., Python, Java, JavaScript). * Solid communication skills and the ability to explain security issues to technical and non-technical audiences. * Knowledge of secure design principles and cloud-native architectures (Microsoft Azure, AWS etc). * Understanding of container and microservice security (e.g., Docker, Kubernetes). How you will contribute * Assist GRC with performing vendor assessments and technical security risk reviews including code reviews, vulnerability scans, and penetration tests on internally developed applications. * Contribute to the technical design of security systems and services to meet organizational needs whilst managing risks to embed security practices into the S-SDLC. * Research and apply innovative security solutions to new or existing problems. * Support and collaborate with other security teams towards a unified vision. * Support the design and implementation of security controls and guardrails in development workflows and CI/CD pipelines. * Collaborate on threat modeling exercises for new features, systems, and architectures. * Triage, analyze, and support the remediation of application vulnerabilities, working closely with developers and product teams. * Build tools, scripts, and automation to scale application security efforts. * Stay informed on the latest security threats, attack vectors, and mitigation techniques relevant to web and cloud applications. * Participate in incident response efforts involving application layer threats. Qualifications * Prior experience in Security Engineering and track record in carrying out technical security risk assessments. * Good understanding for how to assess third-party suppliers of cloud/SaaS based technology platforms. * Certifications such as OSCP, GWAPT, or CSSLP are a plus. * Bachelor's degree in a security related field is preferred (i.e., Security Analysis, Penetration Testing, Malware Analysis, Digital Forensics, Network Engineering, Computer Science). * Strong technical knowledge across various Security Engineering pillars (Network Security, Cloud Security, Infrastructure Security, Email Security and Endpoint Security). * Knowledge of scripting languages is considered highly advantageous (e.g., Python, Bash scripting). Personal Competencies: * Able to balance requirements, complete assigned tasks and work to deadlines. * Effective communicator. * Fast learner and self-starter. * Team player able to collaborate with international teams. * Passionate, continuous learner. Your journey at A&M We recognize that our people are the driving force behind our success, which is why we prioritize an employee experience that fosters each person's unique professional and personal development. Our robust performance development process promotes continuous learning, rewards your contributions, and fosters a culture of meritocracy. With top-notch training and on-the-job learning opportunities, you can acquire new skills and advance your career. We prioritize your well-being, providing benefits and resources to support you on your personal journey. Our people consistently highlight the growth opportunities, our unique, entrepreneurial culture, and the fun we have together as their favorite aspects of working at A&M. The possibilities are endless for high-performing and passionate professionals. Regular employees working 30 or more hours per week are also entitled to participate in Alvarez & Marsal Holdings' fringe benefits consisting of healthcare plans, flexible spending and savings accounts, life, AD&D, and disability coverages at rates determined periodically as well as a 401(k) retirement savings plan. Provided the eligibility requirements are met, employees will also receive an annual discretionary contribution to their 401(k) retirement savings plan from Alvarez & Marsal. Additionally, employees are eligible for paid time off including vacation, personal days, seventy-two (72) hours of sick time (prorated for part time employees), ten federal holidays, one floating holiday, and parental leave. The amount of vacation and personal days available varies based on tenure and role type. Click here for more information regarding A&M's benefits programs. The salary range is $70,000 - $90,000 annually, dependent on several variables including but not limited to education, experience, skills, and geography. In addition, A&M offers a discretionary bonus program which is based on a number of factors, including individual and firm performance. Please ask your recruiter for details. Inclusive Diversity A&M's entrepreneurial culture celebrates independent thinkers and doers who can positively impact our clients and shape our industry. The collaborative environment and engaging work-guided by A&M's core values of Integrity, Quality, Objectivity, Fun, Personal Reward, and Inclusive Diversity-are the main reasons our people love working at A&M. Inclusive Diversity means we embrace diversity, and we foster inclusiveness, encouraging everyone to bring their whole self to work each day. It runs through how we recruit, develop employees, conduct business, support clients, and partner with vendors. It is the A&M way. Equal Opportunity Employer It is Alvarez & Marsal's practice to provide and promote equal opportunity in employment, compensation, and other terms and conditions of employment without discrimination because of race, color, creed, religion, national origin, ancestry, citizenship status, sex or gender, gender identity or gender expression (including transgender status), sexual orientation, marital status, military service and veteran status, physical or mental disability, family medical history, genetic information or other protected medical condition, political affiliation, or any other characteristic protected by and in accordance with applicable laws. Employees and Applicants can find A&M policy statements and additional information by region here. Unsolicited Resumes from Third-Party Recruiters Please note that as per A&M policy, we do not accept unsolicited resumes from third-party recruiters unless such recruiters are engaged to provide candidates for a specified opening. Any employment agency, person or entity that submits an unsolicited resume does so with the understanding that A&M will have the right to hire that applicant at its discretion without any fee owed to the submitting employment agency, person or entity.