Principal Security Engineer (AppSec)
We are seeking a Principal Security Engineer (AppSec) to define and advance application security strategy across a complex technology environment. This is a senior technical leadership role for an experienced security professional who can influence engineering teams, strengthen secure development practices, and help protect products throughout their lifecycle. You will work closely with software engineers, architects, platform teams, and business stakeholders to embed security into design, development, testing, deployment, and operations.
Your responsibilities will include establishing and evolving application security standards, threat modelling methodologies, secure coding guidance, and security architecture principles. You will lead the assessment of applications and services, identify vulnerabilities and design weaknesses, and provide practical remediation advice. You will also oversee the use of security tooling across the software development lifecycle, including static and dynamic analysis, software composition analysis, secrets detection, dependency management, and cloud security controls. The role will involve reviewing security findings, prioritising risk, supporting incident investigations, and contributing to security metrics and reporting. You will help develop automated security checks within CI/CD pipelines and promote security champions, training, and knowledge-sharing initiatives across engineering.
The successful candidate will bring extensive experience in application security, product security, or a closely related discipline, together with strong knowledge of secure software development and modern engineering practices. You should be confident working with cloud-native architectures, APIs, web applications, containers, identity and access management, and common application vulnerabilities. Experience with threat modelling frameworks, security testing tools, DevSecOps practices, and relevant industry standards is highly desirable. Excellent communication and stakeholder-management skills are essential, as is the ability to balance security risk with delivery goals and explain complex technical issues to varied audiences. Relevant professional certifications or demonstrable equivalent experience would be advantageous.
Principal Security Engineer (AppSec)
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Architect
- Security Consultant
- IT Security Manager
- Identity Access Management IAM
- SOC Analyst
- Cyber Security Consultant
- Data Protection
- Penetration Tester
- Application Security
- Governance and Compliance
LATEST JOBS
- Senior Manager, Business Infor...
- Senior Data Protection Manager
- Cyber Security Engineer
- PAM Consultant
- Associate Security Engineer
- GRC Consultant
- Cyber Security Manager
- Risk & Controls Analyst (Cyber...
- Security Analyst – Emerging Te...
- PAM Architect
- Senior GRC Analyst
- OT SIEM Engineer