Robert Walters
Product Application Security Analyst
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
About the Role
You'll act as a trusted security advisor to engineering communities across the entire product lifecycle. This is a non-hands-on, advisory and governance-focused role designed to embed "security-by-design" into modern monolithic and microservice application architectures. You'll lead threat modelling, conduct technical risk assessments, evaluate third-party SaaS vendors, and translate complex risk into pragmatic guidance for engineering squads and business stakeholders.
Partnering with a major UK enterprise digital platform to bring in a Senior InfoSec Analyst into their Product Assurance team.
This isn't a checkbox compliance job, nor is it an operational 2nd-line ticket handling role. You'll sit right alongside software delivery squads and product teams, acting as the technical security authority across monolithic and microservice application architectures.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What the day-to-day looks like
- Security by Design: Threat modelling (STRIDE/OWASP) and setting security requirements early in the SDLC alongside dev squads
- Architectural Assurance: Advising engineering teams on cloud-native security controls, containerisation, and API gateway logic
- Risk & Advisory: Conducting technical risk assessments on internal products and third-party SaaS vendors, turning technical flaws into clear risk recommendations
- Framework Alignment: Ensuring applications comply with PCI-DSS, NIST, and OWASP standards without creating operational friction for developers
What you'll bring
- Experience: 6+ years in InfoSec, cybersecurity advisory, or application security
- Tech Depth: Solid grasp of cloud environments (AWS, Azure, or GCP), microservices, containers (Docker/Kubernetes), and CI/CD pipelines (GitHub, Jenkins)
- Stakeholder Influence: The ability to explain technical risk to product managers and challenge engineering decisions constructively
- Certifications: Holding or actively working towards industry standards like CISSP, CCSP, CISM, CRISC, or Cloud Security Architect certs
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Desired Skills and Experience
- Threat Modelling (STRIDE, PASTA, LINDDUN)
- Security-by-Design / Secure SDLC (SSDLC)
- Product Assurance / Security Assurance
- Application Security (AppSec)
- Technical Risk Assessments
- Third-Party / Vendor Risk Assessment
Robert Walters Operations Limited is an employment business and employment agency and welcomes applications from all candidates
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills