Job Search

We are seeking a Staff Application Security Engineer to provide technical leadership and help strengthen security across the software development lifecycle. You will work closely with engineering, architecture, product and infrastructure teams to embed secure-by-design principles into applications, platforms and delivery processes.

You will lead the identification, assessment and remediation of application security risks, covering design reviews, threat modelling, secure code review, vulnerability management and security testing. You will help define practical security requirements, advise on appropriate controls and support teams in resolving complex issues without unnecessarily slowing delivery.

The role will involve developing and improving application security standards, patterns, tooling and guidance. You will contribute to security automation within CI/CD pipelines, including the effective use of static and dynamic analysis, software composition analysis, secrets detection and infrastructure security checks. You will also help establish meaningful metrics and reporting to track risk, remediation and programme maturity.

As a senior technical contributor, you will act as a trusted adviser and mentor to engineers and security colleagues. You will promote security awareness through documentation, workshops and coaching, while helping to build a consistent, risk-based approach across a varied technology estate. You may also support the investigation of security incidents and the assessment of emerging threats, vulnerabilities and technologies.

You should have substantial experience in application security, software engineering or a closely related discipline, with a strong understanding of modern web applications, APIs, cloud services and secure development practices. Experience with threat modelling methodologies, common vulnerability classes such as OWASP Top 10, security testing tools and automated delivery pipelines is essential.

We are looking for someone who can influence effectively, communicate clearly with both technical and non-technical audiences, and make sound decisions in ambiguous situations. Relevant professional certifications are welcome, but demonstrable practical experience, curiosity and a commitment to continuous improvement are equally valued.

We are seeking an experienced Application Security Engineer to help strengthen the security of software applications throughout their development lifecycle. You will work closely with engineering, architecture, platform and product teams to identify security risks early, promote secure development practices and support the delivery of resilient, high-quality applications.

Your responsibilities will include conducting application security assessments, reviewing source code and architectural designs, supporting threat modelling activities, and helping teams remediate vulnerabilities effectively. You will contribute to the development and maintenance of security standards, guidance and patterns, while ensuring that security controls are practical, proportionate and aligned with business needs.

You will help integrate security testing into CI/CD pipelines and development workflows, including the use of static and dynamic analysis, software composition analysis and other appropriate tooling. The role will also involve investigating security findings, prioritising risks, tracking remediation activity and producing clear reports for both technical and non-technical stakeholders.

The successful candidate will have experience in application security, secure software development or a closely related discipline. You should have a strong understanding of common web and API vulnerabilities, secure coding principles, authentication and authorisation, encryption, secrets management and relevant industry frameworks such as OWASP. Experience with cloud environments, containerised applications, infrastructure as code and modern development methodologies would be advantageous.

You will be a confident communicator who can build effective relationships with technical teams and influence positive security outcomes without unnecessarily slowing delivery. Strong analytical and problem-solving skills are essential, along with the ability to manage competing priorities and explain complex issues clearly. Relevant professional qualifications or certifications are welcome, but practical experience, curiosity and a commitment to continuous learning are equally valued.

This role offers the opportunity to shape application security practices, contribute to meaningful technical improvements and work within a collaborative environment that values secure, reliable and innovative solutions.

We are seeking an Application Security Engineering Manager to lead a talented team responsible for embedding security throughout the software development lifecycle. You will set the technical direction for application security engineering, establish pragmatic security standards, and work closely with software engineering, platform, architecture and product teams to ensure secure design and delivery. This role will combine strategic leadership with hands-on technical involvement, helping to identify risks early and enabling teams to build resilient, high-quality applications.

Your responsibilities will include managing, mentoring and developing application security engineers; defining and improving secure development processes; overseeing threat modelling, secure code reviews, vulnerability management and security testing; and supporting the adoption of automated security controls within CI/CD pipelines. You will establish meaningful metrics and reporting, prioritise remediation activity, and provide clear guidance on risk, regulatory expectations and industry best practice. You will also contribute to incident response, security architecture reviews and the development of policies, standards and training that improve security awareness across the engineering organisation.

You will bring substantial experience in application security, software engineering or a closely related discipline, together with proven experience leading or managing technical teams. Strong knowledge of secure software development, threat modelling, common application vulnerabilities, security testing tools and cloud-native technologies is essential. Experience with DevSecOps, modern development practices and programming or scripting will be highly valued. You should be an effective communicator who can explain complex risks to both technical and non-technical audiences, influence stakeholders at all levels and balance security with delivery objectives. A collaborative, practical and improvement-focused approach is important, as is the ability to work confidently in a fast-paced environment. Relevant professional certifications or a degree in computer science, cyber security or a related subject would be advantageous.

We are seeking a Senior Application Security Engineer to strengthen the security of modern software applications and services throughout their development lifecycle. This is an opportunity to work closely with engineering, platform, architecture and product teams, helping to embed secure-by-design principles across a complex technology environment. You will provide technical leadership, practical guidance and constructive challenge, while supporting a culture in which security is considered a shared responsibility.

Your responsibilities will include defining and improving application security standards, reviewing designs and code, conducting threat modelling, and identifying vulnerabilities across web applications, APIs, cloud services and supporting infrastructure. You will help integrate security controls into CI/CD pipelines and development workflows, ensuring that automated testing, dependency management, secrets protection and security monitoring are effective and proportionate. You will also lead or support vulnerability assessments, coordinate remediation activity, investigate security issues, and advise on appropriate mitigations. Clear documentation, meaningful reporting and the ability to communicate risk to both technical and non-technical audiences will be essential.

You will bring substantial experience in application or product security, with a strong understanding of secure software development practices and common vulnerabilities such as those described by OWASP. Experience with threat modelling methodologies, source code analysis, dynamic testing, software composition analysis and cloud security tooling is highly desirable. You should be comfortable working with modern programming languages, APIs, containers and infrastructure-as-code, and have practical experience embedding security within agile delivery teams. Relevant professional qualifications or certifications are welcome, but demonstrable expertise and sound judgement are equally important. We are looking for someone collaborative, curious and pragmatic, who can influence without relying on authority and who is committed to continuously improving security outcomes.

We are seeking a Senior Application Security Engineer to help strengthen the security of applications and services across the software development lifecycle. You will work closely with engineering, architecture, platform and product teams to embed secure-by-design principles, identify vulnerabilities early and support the delivery of resilient, high-quality software. This is a hands-on role requiring strong technical judgement, effective communication and the ability to influence teams in a collaborative environment.

Your responsibilities will include designing and maintaining application security standards, threat modelling new and existing systems, and conducting security reviews of architecture, code and application interfaces. You will assess findings from penetration testing, vulnerability scanning and other security tools, prioritising remediation according to risk and business impact. You will also help develop secure coding guidance, improve security testing within CI/CD pipelines, and support the management of security defects through to resolution. The role will involve contributing to incident investigations, providing practical advice to development teams and keeping abreast of emerging threats, attack techniques and industry standards.

You will bring substantial experience in application or product security, with a strong understanding of common web and API vulnerabilities, secure software development practices and threat modelling methodologies. Practical knowledge of tools for static and dynamic analysis, software composition analysis, penetration testing or cloud security is expected, along with experience working with modern development and deployment technologies. Familiarity with standards such as OWASP, ISO 27001 or NIST would be beneficial. Excellent written and verbal communication skills are essential, as is the ability to explain complex security matters clearly and work constructively with both technical and non-technical stakeholders. Relevant professional qualifications or demonstrable equivalent experience are welcome.

We are seeking an Application Security Engineer to help protect the software development lifecycle and strengthen security across a diverse range of applications, services and platforms. You will work closely with software engineers, architects, DevOps specialists and product teams to identify, assess and remediate security risks from design through to deployment. The role will involve embedding secure development practices, promoting security awareness and providing practical guidance that enables teams to deliver resilient, high-quality solutions.

Your responsibilities will include conducting threat modelling, secure code reviews and application security assessments, as well as supporting penetration testing and vulnerability management activities. You will help define and maintain security requirements, standards and controls, and contribute to the integration of security tooling into CI/CD pipelines. You will investigate reported vulnerabilities, prioritise findings according to risk and business impact, and work with engineering teams to agree and track effective remediation plans. You will also monitor emerging threats, assess their relevance to the technology estate and contribute to incident response where application-related security issues arise.

The successful candidate will have professional experience in application security, software development, security engineering or a closely related discipline, with a strong understanding of secure coding principles and common vulnerabilities such as those outlined by OWASP. Experience with threat modelling methodologies, code analysis tools, penetration testing techniques and cloud-based environments is highly desirable. You should be comfortable working with modern development practices, APIs, containers and infrastructure as code, and ideally have familiarity with programming or scripting languages such as Python, JavaScript, Java or C#. Strong communication and influencing skills are essential, as you will need to explain technical risks clearly to both technical and non-technical audiences. Relevant industry certifications or demonstrable equivalent experience would be advantageous.

We are seeking a Lead Application Security Engineer to drive the design, implementation and continuous improvement of secure software development practices across a diverse technology estate. This is a hands-on leadership role for an experienced security professional who can influence engineering teams, shape security strategy and embed effective controls throughout the software development lifecycle. You will work closely with developers, architects, platform teams and risk stakeholders to identify vulnerabilities early and support the delivery of resilient, secure applications.

Your responsibilities will include defining and maintaining application security standards, patterns and guidance; leading threat modelling, secure design reviews and architecture assessments; and overseeing security testing, including static and dynamic analysis, software composition analysis and penetration testing. You will triage and prioritise findings, provide practical remediation advice and track risks through to resolution. You will also help develop security tooling and automation within CI/CD pipelines, improve vulnerability management processes, and contribute to incident investigations where application security is a factor. An important part of the role will be mentoring engineers, promoting security awareness and establishing meaningful metrics to measure progress and risk reduction.

You will bring substantial experience in application or product security, with a strong understanding of secure coding principles, common web and API vulnerabilities, and recognised frameworks such as OWASP. Experience with cloud environments, modern development practices, DevSecOps tooling and infrastructure-as-code would be highly valuable. You should be confident reviewing code and designs, communicating complex risks to both technical and non-technical audiences, and influencing decisions without relying on formal authority. Relevant professional certifications or demonstrable equivalent experience are welcome. The successful candidate will be analytical, collaborative and pragmatic, with the leadership skills to build trusted relationships while maintaining high security standards.

We are seeking an experienced Application Security Engineer to help build secure, resilient software throughout the development lifecycle. In this role, you will work closely with software engineers, architects, DevOps specialists and product teams to identify security risks early, strengthen application controls and promote secure engineering practices. You will contribute to security initiatives across web, mobile, API and cloud-based applications, helping teams deliver reliable products without compromising usability or delivery speed.

Your responsibilities will include conducting secure code reviews, threat modelling, architecture assessments and application security testing. You will design and maintain security tooling integrated into CI/CD pipelines, analyse findings from static and dynamic analysis tools, and support vulnerability triage, remediation and risk acceptance processes. You will investigate application security incidents, assist with root-cause analysis and recommend practical improvements. The role will also involve developing security standards, guidance and reusable patterns, as well as delivering training and technical advice to engineering teams. You will help monitor emerging threats, assess new technologies and contribute to security metrics and reporting.

Applicants should have professional experience in application or product security, software development, penetration testing or a closely related discipline. You will need a strong understanding of common web and API vulnerabilities, secure software development principles, authentication and authorisation, cryptography fundamentals, cloud security and relevant security frameworks such as OWASP. Experience with programming or scripting languages such as Python, JavaScript, Java, C# or Go, together with familiarity with tools for SAST, DAST, SCA, secrets detection and dependency management, is highly desirable. Strong communication skills are essential, as you will explain complex risks to both technical and non-technical audiences. Relevant certifications and experience working in Agile or DevSecOps environments are advantageous.

We are seeking a Lead Application Security Engineer to provide technical leadership across the secure software development lifecycle. In this role, you will help shape application security strategy, establish practical security standards, and work closely with engineering, architecture, infrastructure, and product teams to embed security into the design, development, testing, and release of software. You will lead initiatives that reduce risk while enabling teams to deliver reliable, scalable, and secure applications.

Your responsibilities will include developing and maintaining application security policies, patterns, and guidance; leading threat modelling, architecture reviews, and security assessments; and supporting the identification, prioritisation, and remediation of vulnerabilities. You will oversee the effective use of security testing tools, including static and dynamic analysis, software composition analysis, penetration testing, and code review processes. You will also investigate complex security issues, advise on risk acceptance and mitigation, contribute to incident response, and produce clear reports for both technical and non-technical stakeholders. A key part of the role will be mentoring engineers and security specialists, promoting security awareness, and measuring the effectiveness of application security controls.

The successful candidate will have substantial experience in application or product security, with a strong understanding of secure coding principles, modern software architectures, APIs, cloud environments, identity and access management, and common web and mobile vulnerabilities. Experience with DevSecOps practices, CI/CD security automation, threat modelling methodologies, and recognised security frameworks such as OWASP is essential. You should be comfortable influencing senior stakeholders, balancing security with delivery objectives, and communicating complex risks clearly. Relevant professional certifications or equivalent practical experience are desirable. We are looking for a collaborative, pragmatic leader who can operate strategically while remaining hands-on when required.

We are seeking a Senior Application Security Engineer to help strengthen the security of modern software applications throughout their development lifecycle. In this role, you will work closely with engineering, architecture, DevOps, and product teams to embed secure-by-design principles into application development, deployment, and operations. You will contribute to security strategy, establish practical standards, and support teams in delivering resilient, secure services without compromising delivery speed or user experience.

Your responsibilities will include conducting application security assessments, threat modelling, secure code reviews, and vulnerability analysis across web, mobile, API, cloud, and distributed systems. You will design and improve security controls within CI/CD pipelines, manage and tune application security tooling, and help define effective remediation processes. You will investigate complex vulnerabilities, assess their business impact, recommend risk-based solutions, and track issues through to resolution. The role will also involve developing security guidance, reusable patterns, training materials, and developer-focused advice to promote strong security practices across the organisation. You may contribute to incident response, penetration testing coordination, security architecture reviews, and the continuous improvement of application security metrics and reporting.

To succeed in this position, you should have substantial experience in application security, software engineering, or a closely related discipline, with strong knowledge of secure development methodologies and common vulnerability classes such as those outlined by OWASP. Practical experience with threat modelling, source code analysis, dynamic testing, dependency management, cloud security, APIs, authentication, authorisation, and security automation is essential. Familiarity with programming or scripting languages such as Java, C#, Python, JavaScript, or Go is desirable, along with experience using tools such as SAST, DAST, SCA, and container security platforms. Relevant professional certifications are beneficial but not required. We value clear communication, sound judgement, curiosity, and the ability to influence technical decisions while collaborating effectively with stakeholders at all levels.