Application Security Engineer

📋 Job Overview

We're looking for a Application Security Engineer to join our Manchester-based application security business as a member of the AppSec Engineering team. Cytix is a platform that threat models development tickets and creates security testing plans that include both manual and automated testing. In this role, you won't be confined to traditional 4+1 web applications. We're breaking away from the constraints of CHECK or CE+ standards, and we're not interested in producing lengthy PDF reports. Instead, our focus is on seamlessly integrating continuous penetration testing into our customers' Software Development Life Cycle (SDLC). Collaborating closely with both our in-house development team and clients, you'll play in pivotal role in driving penetration testing. Having recently secured Series A funding this opportunity is genuinely one-of-a-kind for the right individual!

🏢 About Cytix

Software never stops changing. Teams ship new code every day, through tickets, pull requests, releases, and increasingly with AI in the mix, but the way security keeps up with all that change hasn't really moved on. That's the problem we're solving. Cytix helps organisations understand which software changes actually matter, what should happen next, and how to prove the right call was made. Security understood, in other words. We're a small team with big plans, so every person we hire genuinely shapes what Cytix becomes. That's why we're upfront about our five values: we interview for all of them, and they matter to us more than a perfect CV. They're things you do, not things you are, so have a read and see if they sound like you.

🎯 The Role

Operating as a Security Consultant specialising in Application Security (AppSec) Testing. Penetration Testing web applications, APIs, mobile applications, etc for our clients across a range of industries. Working with stakeholders of both a technical and non-technical nature to assist in vulnerability identification and remediations. Performing risk reviews of application changes as part of our continuous security testing process. You are comfortable collaborating with developers and external customers.

✅ Key Responsibilities

• Operating as a Security Consultant specialising in Application Security (AppSec) Testing.
• Penetration Testing web applications, APIs, mobile applications, etc for our clients across a range of industries.
• Working with stakeholders of both a technical and non-technical nature to assist in vulnerability identification and remediations.
• Performing risk reviews of application changes as part of our continuous security testing process.
• Collaborating with developers and external customers.

📌 Required Qualifications

• 2+ years in Penetration Testing, Application Security Engineering, or a similar offensive security role.

🎁 Benefits

• Share options - If Cytix wins, you should too.
• Unlimited Holidays!
• Enhanced maternity and paternity pay.
• Pension - 8% (3% employer, 5% employee)
• Private Healthcare through Vitality including dental, optical and hearing
• Work from anywhere (WFA)
• Celebrate your birthday with a day off work
• Octopus car scheme - Drive an electric car through salary sacrifice
• Inclusivity as standard - A team where you can do your best work as yourself, no asterisks.

🛂 Visa & Eligibility

No specific visa or eligibility information provided.