At FNZ, our purpose is to make wealth management more accessible, bringing easier, fairer and more inclusive solutions to people worldwide.

Here in the Global Cyber & Information Security team, we are on a mission to embed cyber resilience across FNZ, protecting the platforms that support investment solutions for over 20 million people.

We are looking for a Application Security Engineer, reporting within the Cyber Resilience and Operations function. You will be working closely with developers to embed security measures and tooling across our application (platform) portfolio to help contribute to building secure products. Ideally, with a software engineering background (e.g. .NET, Java) and experience of assessing security risks, vulnerabilities and alignment to security standards. Knowledge of web based vulnerabilities and API security. You must be passionate about security and excited about joining a fast paced global environment.

Responsibilities:

Provide guidance and oversight to development teams on secure coding practices and application security best practices. Conduct security reviews, including code and design reviews to identify design flaws and vulnerabilities Contribute to and maintain a threat modelling framework and review Develop and maintain security standards, and procedures for application security Collaborate with cross-functional teams to design, implement, and maintain security controls for our applications. Stay up to date with the latest security threats, vulnerabilities, and countermeasures in order to continuously improve our application security posture.Production of reports and updates Guide software engineers on best security practices Assist in penetration testing exercises Track vulnerability remediation Support change boards

Requirements:

Information Security experience, and experience of working in a regulated environment Experience of DevSecOps tooling e.g. Github, CI/CD Experience in application security engineering, threat modelling and secure coding Experience of integrating security into SDLC Experience of assessing vulnerability defects Good collaboration and communication skills, with experience of working with DevOps and delivery teams Familiar with static and dynamic application testing toolsets, including secret scanning and software composition analysis Experienced in managing security risk. Experience in developing and managing formal security documents · Knowledge of cloud concepts a plus

​Our culture is what drives us. It's at the heart of who we are and everything we do. It's what inspires, excites and moves us forward. Our ambition is to create a culture for growth, one that opens up limitless opportunities for our employees, customers and the wider world.

At FNZ we know that great impact is only possible with great teamwork. That’s why we value the strength and diversity of thought in our global team. The FNZ Way is the cornerstone of what we do. It is comprised of four values that set the standard for how everyone at FNZ interacts with each other, with our customers, and with all our diverse stakeholders around the world.

1. Customer obsessed for the long-term

2. Think big and make an impact

3. Act now and own it all the way

4. Challenge, commit and win together

Read more about The FNZ Way and our values: www.fnz.com/culture

About FNZ

FNZ is committed to opening up wealth so that everyone, everywhere can invest in their future on their terms. We know the foundation to do that already exists in the wealth management industry, but complexity holds firms back. 

We created wealth’s growth platform to help. We provide a global, end-to-end wealth management platform that integrates modern technology with business and investment operations. All in a regulated financial institution. 

We partner with over 650 financial institutions and 12,000 wealth managers, with US$1.5 trillion in assets under administration (AUA).

Together with our customers, we help over 20 million people from all wealth segments to invest in their future.