AppSec Staff Engineer
We are seeking an AppSec Staff Engineer to provide technical leadership across application security and help embed secure engineering practices throughout the software development lifecycle. You will work closely with software engineers, architects, product teams and security specialists to identify and address risks early, while enabling teams to deliver secure, reliable products at pace.
You will shape and evolve the application security strategy, standards and engineering patterns. Responsibilities will include designing and improving secure development frameworks, leading threat modelling and security architecture reviews, assessing application and cloud-based services, and advising on authentication, authorisation, data protection and secure API design. You will also guide the triage, remediation and verification of vulnerabilities identified through testing, monitoring and external research.
The role will involve building scalable security tooling and automation across code repositories, CI/CD pipelines and development platforms. You will establish meaningful security metrics, improve developer-facing guidance and training, and promote practical security controls that can be adopted consistently by engineering teams. As a senior technical authority, you will influence strategic decisions, mentor engineers and represent application security in cross-functional forums.
You should have substantial experience in application security, software engineering or a closely related discipline, with a strong understanding of secure design principles and common vulnerability classes such as those covered by the OWASP Top 10. Experience with threat modelling, security testing, code review, cloud environments, containerisation and modern development pipelines is essential. You should be comfortable reading and writing code in at least one common programming language and automating security processes through scripting or engineering solutions.
We are looking for someone who can balance technical depth with pragmatic decision-making and clear communication. You will be confident challenging assumptions, influencing without formal authority and working collaboratively in a complex environment. Relevant professional certifications or demonstrable contributions to security engineering, open-source projects or the wider security community would be advantageous.
AppSec Staff Engineer
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Consultant
- Identity Access Management IAM
- IT Security Manager
- Security Architect
- Data Protection
- Cyber Security Consultant
- Governance and Compliance
- Risk Analyst
- SOC Analyst
- Application Security
LATEST JOBS
- Cyber Security Engineer
- Interim Cyber Security Interna...
- Lead DevSecOps Engineer
- Data Privacy Specialist UK
- Security and Compliance Engine...
- GCIO Operations Manager - Cybe...
- Information Security Analyst
- Senior Director - DevOps Secur...
- Head of Information Security
- Lead Cloud Security Engineer
- Cyber Policy Lead
- IT Security Auditor