Senior Application Security Engineer - Product Security & DevSecOps
We are seeking a Senior Application Security Engineer to help strengthen product security across the software development lifecycle. This is an influential role for an experienced security professional who can combine hands-on technical expertise with the ability to engage effectively with engineering, architecture, product and operations teams.
You will help define and deliver a comprehensive application security and DevSecOps strategy, embedding security into development processes from design through to deployment. Responsibilities will include conducting threat modelling and security reviews, identifying vulnerabilities, assessing risk and supporting teams in implementing effective remediation. You will also contribute to secure coding standards, security architecture guidance, application security testing and the continuous improvement of engineering practices.
The role will involve designing and integrating security controls within CI/CD pipelines, including automated code analysis, software composition analysis, dynamic testing, secrets management and container or infrastructure security checks. You will help establish appropriate security tooling, improve vulnerability management processes and develop meaningful metrics and reporting for technical and senior stakeholders. Where required, you will support incident investigations and advise on the resolution of complex application security issues.
We are looking for strong experience in application security, product security or DevSecOps, together with a detailed understanding of secure software development methodologies. You should be comfortable working with cloud environments, APIs, web applications, containers and modern development toolchains. Experience with security testing tools, threat modelling frameworks and common application vulnerabilities, such as those identified by OWASP, is essential.
Excellent communication and influencing skills are important, as you will be expected to promote security ownership without creating unnecessary barriers to delivery. Relevant professional certifications, such as CISSP, CSSLP, OSCP or equivalent practical experience, would be advantageous. This is an opportunity to make a visible impact by helping teams build secure, resilient products while developing and improving the organisation’s wider security capabilities.
Senior Application Security Engineer - Product Security & DevSecOps
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Consultant
- Identity Access Management IAM
- IT Security Manager
- Security Architect
- Data Protection
- Cyber Security Consultant
- Governance and Compliance
- Risk Analyst
- SOC Analyst
- Application Security
LATEST JOBS
- Cyber Security Engineer
- Interim Cyber Security Interna...
- Lead DevSecOps Engineer
- Data Privacy Specialist UK
- Security and Compliance Engine...
- GCIO Operations Manager - Cybe...
- Information Security Analyst
- Senior Director - DevOps Secur...
- Head of Information Security
- Lead Cloud Security Engineer
- Cyber Policy Lead
- IT Security Auditor