Principal Security Engineer (AppSec)

Reference: tgo4p72mytb15ya6hdo8

We are seeking a Principal Security Engineer (AppSec) to define and advance application security strategy across a complex technology environment. This is a senior technical leadership role for an experienced security professional who can influence engineering teams, strengthen secure development practices, and help protect products throughout their lifecycle. You will work closely with software engineers, architects, platform teams, and business stakeholders to embed security into design, development, testing, deployment, and operations.

Your responsibilities will include establishing and evolving application security standards, threat modelling methodologies, secure coding guidance, and security architecture principles. You will lead the assessment of applications and services, identify vulnerabilities and design weaknesses, and provide practical remediation advice. You will also oversee the use of security tooling across the software development lifecycle, including static and dynamic analysis, software composition analysis, secrets detection, dependency management, and cloud security controls. The role will involve reviewing security findings, prioritising risk, supporting incident investigations, and contributing to security metrics and reporting. You will help develop automated security checks within CI/CD pipelines and promote security champions, training, and knowledge-sharing initiatives across engineering.

The successful candidate will bring extensive experience in application security, product security, or a closely related discipline, together with strong knowledge of secure software development and modern engineering practices. You should be confident working with cloud-native architectures, APIs, web applications, containers, identity and access management, and common application vulnerabilities. Experience with threat modelling frameworks, security testing tools, DevSecOps practices, and relevant industry standards is highly desirable. Excellent communication and stakeholder-management skills are essential, as is the ability to balance security risk with delivery goals and explain complex technical issues to varied audiences. Relevant professional certifications or demonstrable equivalent experience would be advantageous.

COMPETITIVE SALARY
Added 14/10/2026
Reference: tgo4p72mytb15ya6hdo8

Principal Security Engineer (AppSec)

London, England, United Kingdom Permanent Application Security

Other similar jobs

Principal Security Engineer, SDO AppSec EMEA

Added 19/08/2026

We are seeking a highly skilled Principal Security Engineer to lead our Application Security team across the EMEA region. In this pivotal role, you will be responsible for developing and implementing security strategies that enhance the security posture of our applications. You will work closely with cross-functional teams to identify, assess, and mitigate security risks throughout the software development lifecycle. Your expertise will guide the design and architecture of secure applications, ensuring compliance with industry standards and best practices. The ideal candidate will possess extensive experience in application security, with a deep understanding of secure coding practices, threat modeling, and...

Learn more

Sr. Security Engineer, Amazon Stores Security AppSec

Added 20/08/2026

We are seeking a highly skilled Sr. Security Engineer to join our dynamic team focused on enhancing application security across various platforms. In this role, you will be responsible for identifying vulnerabilities within applications, conducting security assessments, and implementing robust security solutions to protect sensitive data. You will collaborate closely with software development teams to integrate security best practices throughout the software development lifecycle, ensuring that security is a fundamental aspect of our applications from inception to deployment. Your duties will include performing threat modeling, code reviews, and penetration testing, as well as developing security policies and guidelines tailored to...

Learn more

Security Engineer, SDO AppSec

Added 17/09/2026

We are seeking a Security Engineer, SDO AppSec to help strengthen application security across the software development lifecycle. In this role, you will work closely with software engineers, architects, product teams, and security specialists to identify risks, improve secure development practices, and support the delivery of resilient applications and services. You will contribute to security initiatives across a diverse technology environment, balancing practical engineering needs with effective risk reduction. Your responsibilities will include conducting application security assessments, threat modelling, code and architecture reviews, and security testing throughout the development lifecycle. You will help integrate security controls into CI/CD pipelines, improve...

Learn more

Security Engineer, SDO AppSec

Added 17/09/2026

We are seeking a Security Engineer specialising in application security to help strengthen the security of software products, platforms, and development processes. In this role, you will work closely with software engineers, architects, product managers, and infrastructure teams to identify, assess, and remediate security risks throughout the software development lifecycle. You will contribute to secure-by-design practices, provide practical security guidance, and help teams deliver reliable services without compromising usability or delivery speed. Your responsibilities will include conducting application and architecture reviews, threat modelling, code and dependency analysis, vulnerability assessments, and security testing across web, mobile, API, and cloud-based environments. You...

Learn more

Security Engineer, SDO AppSec EMEA

Added 19/08/2026

We are seeking a dedicated Security Engineer to join our Application Security team in the EMEA region. In this role, you will be responsible for identifying and mitigating security risks within our software development lifecycle. You will work closely with development and operations teams to ensure that security best practices are integrated into the application design and deployment processes. Your expertise will be crucial in conducting security assessments, vulnerability scans, and code reviews, as well as providing actionable recommendations to enhance the overall security posture of our applications. The ideal candidate will have a strong background in application security, with...

Learn more

Security Engineer, SDO AppSec EMEA

Added 19/08/2026

We are seeking a talented Security Engineer to join our dynamic team in the EMEA region, focusing on Application Security. In this role, you will be responsible for safeguarding our applications and systems by identifying vulnerabilities, implementing security measures, and ensuring compliance with security standards. Your expertise will be crucial in conducting security assessments, code reviews, and penetration testing to proactively mitigate risks associated with application security. You will collaborate closely with development teams to embed security practices throughout the software development lifecycle, ensuring that security is a fundamental part of our processes. The ideal candidate will possess in-depth knowledge...

Learn more

Graduate Programme 2027: Information Security Engineer (Appsec)

Added 18/08/2026

Join our dynamic Graduate Programme as an Information Security Engineer (Appsec) and take the first step towards an exciting career in cybersecurity. In this role, you will be responsible for developing and maintaining security protocols for applications, ensuring the integrity and confidentiality of data. You will conduct security assessments, identify vulnerabilities, and collaborate with development teams to implement effective security measures throughout the software development lifecycle. Your analytical skills will be put to the test as you participate in incident response activities and contribute to risk assessments to protect critical information assets. We are looking for candidates who have a...

Learn more

Security Engineering Manager, SDO AppSec EMEA

Added 15/10/2026

We are seeking a Security Engineering Manager to lead application security engineering across the EMEA region. This is a hands-on leadership role responsible for building and developing a high-performing team, strengthening secure software development practices and helping engineering teams deliver resilient, secure products at scale. You will work closely with engineering, product, infrastructure, risk and compliance stakeholders to embed security throughout the software development lifecycle. Your responsibilities will include setting the regional application security strategy, managing priorities and delivery plans, and overseeing programmes covering secure design, threat modelling, code review, vulnerability management, security testing and remediation. You will establish effective...

Learn more

Principal Product Security Engineer

Added 12/10/2026

We are seeking a Principal Product Security Engineer to define and advance security practices across the product development lifecycle. In this senior technical role, you will work closely with engineering, architecture, infrastructure, quality assurance, and product teams to ensure that security is embedded from design through deployment and ongoing operation. You will help shape security strategy, influence technical direction, and provide practical guidance on building resilient, trustworthy products. Your responsibilities will include establishing and evolving secure development standards, threat modelling approaches, security architecture principles, and risk assessment processes. You will review designs and code for security weaknesses, identify vulnerabilities, and...

Learn more

Principal Security Engineer

Added 12/10/2026

We are seeking a Principal Security Engineer to provide technical leadership across the design, implementation and continuous improvement of enterprise security capabilities. You will define and champion security architecture principles, advise engineering and product teams, and help embed secure-by-design practices throughout the development lifecycle. The role will involve assessing complex technology environments, identifying risks, recommending pragmatic controls and ensuring that security solutions support business objectives without unnecessarily limiting innovation. You will lead initiatives spanning cloud security, application security, infrastructure protection, identity and access management, network security, vulnerability management and incident readiness. Responsibilities will include developing security standards and reference architectures;...

Learn more

Principal Security Consultant Engineer

Added 09/10/2026

We are seeking a Principal Security Consultant Engineer to provide senior technical leadership across complex cybersecurity engagements. In this role, you will assess security architectures, identify vulnerabilities and risks, and design practical, scalable solutions that strengthen the resilience of systems, applications, networks, and cloud environments. You will work closely with technical teams, business stakeholders, and delivery partners to translate security requirements into clear recommendations and measurable improvements. Your responsibilities will include leading security assessments, threat modelling, architecture reviews, penetration testing oversight, and incident-readiness activities. You will develop detailed reports, risk treatments, security strategies, and implementation roadmaps, while ensuring that recommendations...

Learn more

Principal Security Engineer (12 Month FTC)

Added 07/10/2026

We are seeking an experienced Principal Security Engineer for a 12-month fixed-term contract to provide technical leadership across a broad cybersecurity landscape. You will help define and deliver security strategies that protect critical systems, applications, data and infrastructure, while supporting the organisation’s wider technology and business objectives. This is a senior hands-on role requiring strong technical judgement, the ability to influence stakeholders, and a practical approach to managing security risk in a complex environment. Responsibilities will include designing and reviewing secure architectures, leading threat modelling and security assessments, and embedding security controls throughout the software development and technology lifecycle. You...

Learn more

Principal Security Operations Engineer

Added 05/10/2026

We are seeking a Principal Security Operations Engineer to provide technical leadership across the design, operation and continuous improvement of security monitoring and incident response capabilities. In this role, you will help protect critical systems, applications and data by developing resilient detection strategies, improving operational processes and guiding the response to complex cyber threats. You will work closely with security architecture, infrastructure, cloud, engineering and risk teams to ensure security operations are aligned with business priorities and evolving threat landscapes. Your responsibilities will include leading the investigation and response to high-severity security incidents, developing and tuning detections across SIEM, endpoint,...

Learn more

Principal Product Security Engineer

Added 23/09/2026

We are seeking a Principal Product Security Engineer to provide technical leadership across the secure design, development, and operation of products and services. In this role, you will shape product security strategy, influence engineering roadmaps, and embed security practices throughout the software development lifecycle. You will work closely with product managers, software engineers, architects, and infrastructure teams to identify risks early and deliver practical, scalable solutions that protect customers and business operations. Your responsibilities will include leading threat modelling and security architecture reviews, defining security requirements, and advising teams on secure design patterns, authentication, authorisation, cryptography, data protection, and cloud...

Learn more

Principal Security Software Engineer

Added 22/09/2026

We are seeking a Principal Security Software Engineer to provide technical leadership in the design, development, and delivery of secure, scalable software systems. In this role, you will help define security engineering strategy, establish robust development practices, and guide teams in building products that protect sensitive data and withstand evolving threats. You will work closely with software engineers, architects, product managers, and infrastructure specialists to embed security throughout the software development lifecycle. Your responsibilities will include designing secure architectures, reviewing code and technical designs, identifying vulnerabilities, and driving remediation across applications, services, APIs, and cloud environments. You will develop security...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.