Application Security Engineer at Bottomline Technologies

<div class="content-intro"><h2>Why Choose Bottomline?</h2> <p>Are you ready to transform the way businesses pay and get paid? Bottomline is a global leader in business payments and cash management, with over 35 years of experience and moving more than $16 trillion in payments annually. We're looking for passionate individuals to join our team and help drive impactful results for our customers. If you're dedicated to delighting customers and promoting growth and innovation - we want you on our team!</p></div><p>&nbsp;</p> <table data-tablestyle="MsoTableGrid" data-tablelook="1184"> <tbody> <tr> <td data-celllook="4369"> <p><span data-contrast="none">As an Application Security Engineer, you will play a critical role in strengthening the organisation’s application security posture by supporting&nbsp;our&nbsp;penetration testing and application code scanning programmes. This role&nbsp;is responsible for&nbsp;identifying&nbsp;vulnerabilities, analysing security patterns and behaviours, and contributing to the continuous improvement of secure development practices across the software lifecycle.</span><span data-ccp-props="{&quot;335559738&quot;:120,&quot;335559739&quot;:120}">&nbsp;</span></p> <p><span data-contrast="none">You will work closely with Product, Engineering, and Security teams to proactively&nbsp;identify&nbsp;and reduce risk exposure, supporting&nbsp;our&nbsp;threat exposure management approach across all applications. The role requires strong technical&nbsp;expertise&nbsp;combined with the ability to communicate complex security risks clearly and effectively to both technical and non-technical stakeholders.</span><span data-ccp-props="{&quot;335559738&quot;:120,&quot;335559739&quot;:120}">&nbsp;</span></p> <p><span data-ccp-props="{&quot;335559738&quot;:120,&quot;335559739&quot;:120}">&nbsp;</span><strong><span data-contrast="none">Essential Functions and Responsibilities:&nbsp;</span></strong><span data-ccp-props="{&quot;335559738&quot;:120,&quot;335559739&quot;:120}">&nbsp;</span></p> </td> </tr> <tr> <td data-celllook="4369"> <ul> <li data-leveltext="·" data-font="Symbol" data-listid="7" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;·&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Orchestrate&nbsp;application p<strong>enetration testing</strong> across web, API, and service-based&nbsp;architectures</span><span data-ccp-props="{&quot;335559739&quot;:0}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="·" data-font="Symbol" data-listid="7" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;·&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="2" data-aria-level="1"><span data-contrast="none">Support&nbsp;application security scanning tools (SAST, SCA, DAST) and&nbsp;CI/CD&nbsp;pipeline integration</span><span data-ccp-props="{&quot;335559739&quot;:0}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="·" data-font="Symbol" data-listid="7" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;·&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="3" data-aria-level="1"><span data-contrast="none">Analyse&nbsp;vulnerabilities to&nbsp;identify&nbsp;patterns,&nbsp;behaviours, and root causes, not just individual findings</span><span data-ccp-props="{&quot;335559739&quot;:0}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="·" data-font="Symbol" data-listid="7" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;·&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="4" data-aria-level="1"><span data-contrast="none">Support&nbsp;prioritisation&nbsp;and provide guidance for&nbsp;remediation based on risk&nbsp;and threat exposure</span><span data-ccp-props="{&quot;335559739&quot;:0}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="·" data-font="Symbol" data-listid="7" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;·&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="5" data-aria-level="1"><span data-contrast="none">Contribute to improving coverage, consistency, and reliability of application security testing</span><span data-ccp-props="{&quot;335559739&quot;:120}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="·" data-font="Symbol" data-listid="7" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;·&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="6" data-aria-level="1"><span data-contrast="none">Support multiple projects and initiatives in parallel</span> &nbsp;</li> </ul> </td> </tr> </tbody> </table> <p><strong><span data-contrast="none">&nbsp;&nbsp;Required Experience &amp; Qualifications</span></strong><span data-ccp-props="{&quot;335559738&quot;:120,&quot;335559739&quot;:120}">&nbsp;</span></p> <ul> <li data-leveltext="·" data-font="Symbol" data-listid="7" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;·&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="7" data-aria-level="1"><span data-contrast="none">3+ years’ experience in <strong>Application Security, Penetration Testing, or&nbsp;Secure&nbsp;Code&nbsp;Scanning</strong></span><span data-ccp-props="{&quot;335559739&quot;:0}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="·" data-font="Symbol" data-listid="7" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;·&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="8" data-aria-level="1"><span data-contrast="none">Hands-on experience with p<strong>enetration testing techniques and tools</strong></span><span data-ccp-props="{&quot;335559739&quot;:0}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="·" data-font="Symbol" data-listid="7" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;·&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="9" data-aria-level="1"><span data-contrast="none">Experience with application security scanning platforms (SAST, SCA, DAST)</span><span data-ccp-props="{&quot;335559739&quot;:0}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="·" data-font="Symbol" data-listid="7" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;·&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="10" data-aria-level="1"><span data-contrast="none">Strong understanding of common <strong>vulnerability patterns</strong> (e.g.&nbsp;OWASP Top 10)</span><span data-ccp-props="{&quot;335559739&quot;:0}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="·" data-font="Symbol" data-listid="7" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;·&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="11" data-aria-level="1"><span data-contrast="none">Knowledge of modern environments (APIs, microservices,<strong> CI/CD pipelines</strong>)</span><span data-ccp-props="{&quot;335559739&quot;:120}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="·" data-font="Symbol" data-listid="7" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;·&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="12" data-aria-level="1"><span data-contrast="none">Strong analytical, problem-solving, and communication skills</span><span data-ccp-props="{&quot;335559739&quot;:120}">&nbsp;</span></li> </ul> <p><span data-ccp-props="{&quot;335559739&quot;:0}">&nbsp;</span><strong><span data-contrast="none">Preferred Experience &amp; Qualifications</span></strong><span data-ccp-props="{&quot;335559738&quot;:120,&quot;335559739&quot;:120}">&nbsp;</span></p> <ul> <li data-leveltext="·" data-font="Symbol" data-listid="4" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;·&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Experience with platforms such as&nbsp;<strong>Veracode</strong>, Burp Suite, OWASP ZAP, or similar</span><span data-ccp-props="{&quot;335559739&quot;:0}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="·" data-font="Symbol" data-listid="4" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;·&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="2" data-aria-level="1"><span data-contrast="none">Understanding of&nbsp;risk-based or threat exposure management models</span><span data-ccp-props="{&quot;335559739&quot;:0}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="·" data-font="Symbol" data-listid="4" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;·&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="3" data-aria-level="1"><span data-contrast="none">Experience working with development teams in secure coding practices</span><span data-ccp-props="{&quot;335559739&quot;:0}">&nbsp;</span></li> </ul> <ul> <li data-leveltext="·" data-font="Symbol" data-listid="4" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;·&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" data-aria-posinset="4" data-aria-level="1"><span data-contrast="none">Relevant certifications such as:</span>&nbsp;<br><span data-contrast="none">OSCP, OSWE, GWAPT, GPEN, CEH, CSSLP, CISSP or CISM</span><span data-ccp-props="{&quot;335559739&quot;:0}">&nbsp;</span></li> </ul> <p><span data-contrast="none">&nbsp;&nbsp;</span><span class="NormalTextRun SCXW190499575 BCX8">Note</span><span class="NormalTextRun SCXW190499575 BCX8">: This</span><span class="NormalTextRun SCXW190499575 BCX8">&nbsp;job description is not intended to be an exhaustive list of all duties, responsibilities, or qualifications associated with the position.</span></p><div class="content-conclusion"><p>We welcome talent at all career stages and are dedicated to understanding and supporting additional needs. We're proud to be an equal opportunity employer, committed to creating an inclusive and open environment for everyone.</p></div>