Senior Application Security Engineer
We are seeking a Senior Application Security Engineer to help strengthen the security of modern applications and services throughout their development and operational lifecycles. This is an opportunity to work closely with software engineering, platform, infrastructure and risk teams to embed secure-by-design principles across a varied technology environment.
You will lead the identification, assessment and remediation of application security risks, supporting teams to understand vulnerabilities and implement practical, sustainable solutions. Your responsibilities will include conducting threat modelling, secure code reviews and security assessments; analysing findings from static and dynamic application security testing tools; and advising on remediation priorities based on business impact and exploitability.
You will help define and improve application security standards, patterns and guidance, while contributing to security architecture reviews and design decisions. You will also support the development of security tooling and automation within CI/CD pipelines, helping to make security testing efficient, repeatable and accessible to engineering teams. Where appropriate, you will investigate security incidents, assist with root-cause analysis and recommend preventative improvements.
The successful candidate will have substantial experience in application security engineering, software development or a closely related discipline, with a strong understanding of secure software development practices and common web application vulnerabilities. You should be confident working with standards and frameworks such as OWASP, NIST or similar, and have practical experience with application security testing tools, threat modelling techniques and cloud-based environments.
Strong communication and influencing skills are essential, as you will work with both technical and non-technical stakeholders and promote security as an enabler rather than a barrier. Experience with scripting or programming languages, container security, APIs, infrastructure as code and DevSecOps practices would be advantageous. Relevant professional certifications or equivalent practical experience are welcome.
This role offers the chance to make a meaningful contribution to security maturity, shape engineering practices and help deliver resilient, trustworthy applications. Flexible working arrangements may be available, alongside opportunities for professional development and continued learning.
Senior Application Security Engineer
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Consultant
- Identity Access Management IAM
- IT Security Manager
- Security Architect
- Data Protection
- Cyber Security Consultant
- Governance and Compliance
- Risk Analyst
- SOC Analyst
- Application Security
LATEST JOBS
- Cyber Security Engineer
- Interim Cyber Security Interna...
- Lead DevSecOps Engineer
- Data Privacy Specialist UK
- Security and Compliance Engine...
- GCIO Operations Manager - Cybe...
- Information Security Analyst
- Senior Director - DevOps Secur...
- Head of Information Security
- Lead Cloud Security Engineer
- Cyber Policy Lead
- IT Security Auditor