Engineer, Product Security

Come and work in Product Security at News Corp, a world-renowned media business. As an Engineer in the Product Security team, you will work closely with the cybersecurity and product engineering teams to ensure that our applications are developed securely and vulnerabilities are managed. You will have the chance to work with household names such as The Times, The Sun, talkSPORT and Virgin Radio. This role is ideal for someone with a couple of years of experience in cybersecurity, or someone looking to transition from a related discipline such as software development. We're on the hunt for someone who is more than just a coder or a security enthusiast. We want someone who lives and breathes cybersecurity, thrives on solving complex problems, and is eager to make a real impact on the security of our products. This role is perfect for someone who demonstrates a deep passion for cybersecurity, whether through personal projects, community involvement, or staying up-to-date with the latest trends and threats. About the job

• Operate Security Tools: Utilise tools such as Static Application Security Testing (SAST) and Software Composition Analysis (SCA) to identify vulnerabilities across our codebase.
• Review & Triage: Analyze the output of application security tools and reports, triaging vulnerabilities and ensuring they are appropriately addressed.
• Threat Modelling: Support threat modelling sessions to identify and mitigate potential security risks.
• Custom Tools & Scripts: Contribute to the development and maintenance of custom internal tools and scripts to enhance our security posture.
• Developer Support: Be a go-to resource for our developer community, offering advice and support on security best practices.
  
  Passion for Security: You should have a genuine passion for cybersecurity and a strong desire to stay current with the latest trends and threats.
• Programming Skills: Demonstrable programming knowledge is essential. Experience with Python, Javascript and/or PHP is a bonus.
• Application Security Knowledge: You have a deep understanding of common web vulnerabilities, such as the OWASP Top 10, and know how to mitigate them.
• Tools: You have experience operating common application security tools such as Static Application Security Testing (SAST) tools.
• Problem Solver: You love tackling complex problems and finding innovative solutions.
• Proactive Learner: You're always looking for ways to improve your skills and knowledge.
• Team Player: You thrive in a collaborative environment and are willing to share your expertise with others.
  
  News Corp is a global, diversified media and information services company focused on creating and distributing authoritative and engaging content to consumers throughout the world. The company comprises businesses across a range of media, including: news and information services, book publishing, digital real estate services, cable network programming in Australia, and pay-tv distribution in Australia.
Headquartered in New York, the activities of News Corp are conducted primarily in the United States, Australia, and the United Kingdom.