Success Measures: \n \n Number of threat models completed \n Number of penetration tests completed \n Number of engagements on AI and Software Engineering Projects \n Number of risk assessments completed \n \n What You Will Have \n \n 5+ years of experience in application security, software engineering, or DevSecOps. \n Proven hands-on experience securing applications built with .NET, Java, and Node.js . \n Demonstrable expertise administering SAST scanning at enterprise scale (multi-project, multi-language). \n Experience implementing and managing SCA tooling, ideally Harness, across large codebases. \n Strong working knowledge of GitHub Actions CI/CD pipelines and GitHub Advanced Security features. \n Experience configuring and using IAST and RASP technologies \n Deep understanding of common vulnerability classes (injection, broken access control, cryptographic failures, SSRF, etc.). \n Ability to execute on web and desktop penetration tests. \n Demonstrable expertise securing the embedding and implementation of AI within applications \n \n \n Desirable: \n \u2022 Relevant certifications: CSSLP, GWEB, GWAPT, CEH, OSCP or equivalent.\u2022 Experience with additional SAST/DAST/IAST/RASP tools (Checkmarx, Snyk, Veracode, Contrast Security).\u2022 Contributions to open-source security projects or published security research.\u2022 Familiarity with regulatory frameworks (SOC 2, ISO 27001, GDPR) as they relate to application security.\u2022 Experience with Kubernetes security and service-mesh architectures. \n \n #LI-PB1 \n What We Do For You \n \n Wellbeing\u202ffocused \u202f\u2013\u202fOur\u202fpeople\u202fare\u202four\u202fgreatest\u202fassets,\u202fand\u202fensuring\u202feveryone\u202ffeels\u202ftheir\u202fbest\u202fself to\u202fcome\u202fto\u202fwork\u202fis\u202fintegral. \n Annual\u202fLeave\u202f \u2013\u202f20\u202fdays\u202fof\u202fannual\u202fleave,\u202fplus\u202fpublic\u202fholidays\u202f \n Employee\u202fAssistance\u202fProgramme \u202f\u2013\u202fFree\u202fadvice,\u202fsupport,\u202fand\u202fconfidential\u202fcounselling\u202favailable\u202f24/7. \n Personal Growth - Regardless of where you are at in your career, we\u2019re committed to enabling your growth personally and professionally\n \n Development Programmes \u2013 From Future Managers to Leadership Training, our development programmes help you get where you need to go \n Online Learning Platform: SkillsHub! - Learning at your fingertips, anytime from anywhere. You can access our online library with relevant content for your career growth. \n \n Life Insurance - 3x annual salary \n Personal Accident Insurance - providing cover in the event of serious injury/illness. \n Performance Bonus \u2013 Our Group-wide bonus scheme enables you to reap the rewards of your success \n \n Who We Are \n At OneAdvanced, we are at the forefront of delivering sector-focused technology solutions that simplify complexity, drive meaningful progress, and help build a fairer, more inclusive society. \n \n We\u2019re much more than a software company. We deliver SaaS workflow applications and IT services that power organisations across Education, Government, Healthcare, Legal, Manufacturing, Housing, Retail, and more. \n OneAdvanced is one of the UK\u2019s largest business software and services companies. Based in Birmingham (The Mailbox), operating across the UK, Ireland, India, and Australia. \n Our secure, scalable platform, including OneAdvanced AI, our private AI service for UK organisations, powers connectivity and innovation across critical sectors. Alongside our software are our IT services, including hosting, managed services, and application modernisation. \n We strive to create an inclusive workplace that drives innovation and collaboration, championing diverse perspectives and ideas. Our Environmental, Social and Governance (ESG) strategy is embedded in everything we do, guiding us to create meaningful impact for our people, our customers and the planet. \n Join us and become part of a team that\u2019s powering the world of work and making a real difference. \n \n Learn more at www.oneadvanced.com \n \n ","directApply":true,"datePosted":"2026-10-08T04:00:00.000Z","title":"Principal Cyber Security Test Engineer","occupationalCategory":"Technology","@context":"http://schema.org","url":"https://careers-oneadvanced.icims.com/jobs/8709/principal-cyber-security-test-engineer/job"} try { document.body.className += " iCIMS_other iCIMS_other"; } catch(e) {} Please Enable Cookies to Continue Please enable cookies in your browser to experience all the personalized features of this site, including the ability to apply for a job. Welcome page Returning Candidate? Log back in! Principal Cyber Security Test Engineer
OneAdvanced · Bangalore
Source and collection record
Last observed by our collector: . This is not a manual review or a confirmation from the employer.
Employer requisition: 2026-8709
Job type and experience labels are automated discovery categories. The employer determines eligibility. Original experience wording was not retained separately; check the current employer page.
Your application evidence checklist
Mark the statements you can support after reading the employer source. This checklist stays on this page; it does not score your eligibility or submit an application.
0 of 2 checks marked. Keep unresolved requirements as questions for the employer.
Collected role description
We are looking for an experienced application security engineer who will champion a shift-left security philosophy by integrating automated security analysis into CI/CD pipelines, SAST scanning, GitHub Actions, and SCA. To ensure we embed security into the software development lifecycle (SDLC) across the organisation’s .NET, Java, and Node.js technology stacks. This role is also needed to run web application security assessments or penetration tests. Threat Modelling Code reviews Supporting engineering teams with security related design and build issues Reviewing the results from various security code scanning tools Reviewing CI/CD pipeline configurations Create or amend code and generate pull requests for code fixes Reviewing and testing AI integrations and relevant guard rails etc Assisting other members of the team with application security related issues Completing web and desktop security assessments Carrying out risk assessments using the IRAM2 methodology Attending architecture board technical reviews Success Measures: Number of threat models completed Number of penetration tests completed Number of engagements on AI and Software Engineering Projects Number of risk assessments completed 5+ years of experience in application security, software engineering, or DevSecOps. Proven hands-on experience securing applications built with .NET, Java, and Node.js . Demonstrable expertise administering SAST scanning at enterprise scale (multi-project, multi-language). Experience implementing and managing SCA tooling, ideally Harness, across large codebases. Strong working knowledge of GitHub Actions CI/CD pipelines and GitHub Advanced Security features. Experience configuring and using IAST and RASP technologies Deep understanding of common vulnerability classes (injection, broken access control, cryptographic failures, SSRF, etc.). Ability to execute on web and desktop penetration tests. Demonstrable expertise securing the embedding and implementation of AI within applications Desirable: • Relevant certifications: CSSLP, GWEB, GWAPT, CEH, OSCP or equivalent. • Experience with additional SAST/DAST/IAST/RASP tools (Checkmarx, Snyk, Veracode, Contrast Security). • Contributions to open-source security projects or published security research. • Familiarity with regulatory frameworks (SOC 2, ISO 27001, GDPR) as they relate to application security. • Experience with Kubernetes security and service-mesh architectures. #LI-PB1
Collected experience requirement
5+ years