Specialist, Application Security

Job Title: Specialist, Application Security Job Description: We are seeking a highly skilled and motivated

Application Security Engineer to join our growing security team. In this role, you will play a critical part in securing our applications by embedding security throughout the Software Development Lifecycle (SDLC), identifying vulnerabilities, and enabling development teams to build secure, resilient systems.

Key Responsibilities

• Perform

secure code reviews ,

dependency analysis (SCA) , and

dynamic security testing (DAST) across a range of applications.

• Conduct

manual security assessments and penetration testing to identify vulnerabilities.

• Integrate

security best practices into SDLC and CI/CD pipelines .

• Collaborate closely with engineering teams to design and implement

secure-by-design applications .

• Design and implement robust

authentication and authorization mechanisms .

• Drive adoption of modern

application security practices and frameworks .

• Stay up to date with the latest

security threats, vulnerabilities, and mitigation techniques .

• Deliver

secure coding training sessions and awareness programs for developers.

• Conduct

risk assessments and provide actionable recommendations for mitigation.

Qualifications & Skills

• 4+ years of combined experience in

software development, cybersecurity, and application security .

• Hands-on experience with

SAST, DAST, and SCA tools .

• Strong knowledge of

secure SDLC practices and CI/CD security integration .

• Proficiency in

Python, Java, or JavaScript .

• Understanding of

AI technologies such as

Generative AI and Agentic systems .

• Knowledge of

security frameworks (OWASP Top 10, NIST, CIS).

• Strong grasp of

cryptography, authentication, and authorization protocols .

• Experience in

threat modeling (experience with commercial tools is a plus).

• Familiarity with

cloud and container security (AWS, Azure, Kubernetes).

• Excellent

communication and collaboration skills .

Preferred Qualifications

• Bachelor’s degree in

Computer Science, Cybersecurity, or related field .

• Industry certifications such as:
• OSCP / OSWE
• GWAPT / eWPT
• CISSP, CSSLP, or CEH (with application security focus) Who we are: At Pearson, our purpose is simple: to help people realize the life they imagine through learning. We believe that every learning opportunity is a chance for a personal breakthrough. We are the world's lifelong learning company. For us, learning isn't just what we do. It's who we are. To learn more: We are Pearson. Pearson is an Equal Opportunity Employer and a member of E-Verify. Employment decisions are based on qualifications, merit and business need. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, sexual orientation, gender identity, gender expression, age, national origin, protected veteran status, disability status or any other group protected by law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act. If you are an individual with a disability and are unable or limited in your ability to use or access our career site as a result of your disability, you may request reasonable accommodations by emailing [email removed].

Job: Security

Job Family: TECHNOLOGY

Organization: OCTO

Schedule: FULL_TIME

Workplace Type: Hybrid

Req ID: 24964