Application Security Engineer

Responsibilities

• Embed security best practices into the software development lifecycle in collaboration with DevOps and engineering teams.
• Provide guidance on secure design, implementation, architecture, API security, microservices, and cloud-native application security.
• Conduct manual security assessments and coordinate third-party security engagements.
• Review SAST, DAST, and SCA findings and drive vulnerability remediation through closure.
• Provide application security support and improve security processes, tooling, and ways of working.
• Lead or contribute to the Security Champions programme and support GSOC and CSIRT teams with application-layer security incidents.
• Support third-party supply chain security and developer security training or enablement.

Requirements

• Strong hands-on application security experience and knowledge of secure software development, OWASP Top 10, common application vulnerabilities, and secure SDLC practices.
• Proficiency in one or more programming languages, such as Python or JavaScript, for security automation, tooling, or custom rule development.
• Experience with cloud platforms such as AWS, Azure, or SAP and knowledge of application architectures, container security, API security, network protocols, OAuth 2.0, OIDC, and SAML.
• Working knowledge of DevOps pipelines, repositories, and CI/CD security integration using platforms such as Azure DevOps and GitHub Actions.
• Experience with SAST, DAST, SCA, container scanning, vulnerability management, SBOM tooling such as CycloneDX, infrastructure-as-code security across Terraform, Bicep, and Ansible, Trivy, Policy as Code, and threat modelling.
• Ability to guide engineering teams, support third-party supply chain security, and communicate complex security topics practically.
• Desirable qualifications include GWAPT, GWEB, OSCP, or AWS Security Specialty certifications, plus Security Champions, developer training, SOC, or incident response experience.

Benefits

• UK-based hybrid work arrangement with occasional travel to site.
• 15% Employee Energy Allowance.
• Comprehensive pension plan.
• Fully funded company healthcare plan.
• 25 days of holiday plus public holidays, with the option to purchase up to five additional days.
• Flexible benefits including technology benefits, eco-friendly car leases, and travel insurance.