Senior Application Security Engineer
We are seeking a Senior Application Security Engineer to help strengthen the security of modern software applications throughout their development lifecycle. In this role, you will work closely with engineering, architecture, DevOps, and product teams to embed secure-by-design principles into application development, deployment, and operations. You will contribute to security strategy, establish practical standards, and support teams in delivering resilient, secure services without compromising delivery speed or user experience.
Your responsibilities will include conducting application security assessments, threat modelling, secure code reviews, and vulnerability analysis across web, mobile, API, cloud, and distributed systems. You will design and improve security controls within CI/CD pipelines, manage and tune application security tooling, and help define effective remediation processes. You will investigate complex vulnerabilities, assess their business impact, recommend risk-based solutions, and track issues through to resolution. The role will also involve developing security guidance, reusable patterns, training materials, and developer-focused advice to promote strong security practices across the organisation. You may contribute to incident response, penetration testing coordination, security architecture reviews, and the continuous improvement of application security metrics and reporting.
To succeed in this position, you should have substantial experience in application security, software engineering, or a closely related discipline, with strong knowledge of secure development methodologies and common vulnerability classes such as those outlined by OWASP. Practical experience with threat modelling, source code analysis, dynamic testing, dependency management, cloud security, APIs, authentication, authorisation, and security automation is essential. Familiarity with programming or scripting languages such as Java, C#, Python, JavaScript, or Go is desirable, along with experience using tools such as SAST, DAST, SCA, and container security platforms. Relevant professional certifications are beneficial but not required. We value clear communication, sound judgement, curiosity, and the ability to influence technical decisions while collaborating effectively with stakeholders at all levels.
Senior Application Security Engineer
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Architect
- Security Consultant
- IT Security Manager
- Identity Access Management IAM
- SOC Analyst
- Cyber Security Consultant
- Data Protection
- Penetration Tester
- Application Security
- Governance and Compliance
LATEST JOBS
- Senior Manager, Business Infor...
- Senior Data Protection Manager
- Cyber Security Engineer
- PAM Consultant
- Associate Security Engineer
- GRC Consultant
- Cyber Security Manager
- Risk & Controls Analyst (Cyber...
- Security Analyst – Emerging Te...
- PAM Architect
- Senior GRC Analyst
- OT SIEM Engineer