Job Search

We are seeking a Senior Application Security Engineer to help strengthen the security of applications and services across the software development lifecycle. You will work closely with engineering, architecture, platform and product teams to embed secure-by-design principles, identify vulnerabilities early and support the delivery of resilient, high-quality software. This is a hands-on role requiring strong technical judgement, effective communication and the ability to influence teams in a collaborative environment.

Your responsibilities will include designing and maintaining application security standards, threat modelling new and existing systems, and conducting security reviews of architecture, code and application interfaces. You will assess findings from penetration testing, vulnerability scanning and other security tools, prioritising remediation according to risk and business impact. You will also help develop secure coding guidance, improve security testing within CI/CD pipelines, and support the management of security defects through to resolution. The role will involve contributing to incident investigations, providing practical advice to development teams and keeping abreast of emerging threats, attack techniques and industry standards.

You will bring substantial experience in application or product security, with a strong understanding of common web and API vulnerabilities, secure software development practices and threat modelling methodologies. Practical knowledge of tools for static and dynamic analysis, software composition analysis, penetration testing or cloud security is expected, along with experience working with modern development and deployment technologies. Familiarity with standards such as OWASP, ISO 27001 or NIST would be beneficial. Excellent written and verbal communication skills are essential, as is the ability to explain complex security matters clearly and work constructively with both technical and non-technical stakeholders. Relevant professional qualifications or demonstrable equivalent experience are welcome.

We are seeking a Senior Application Security Engineer to strengthen the security of modern software applications and services throughout their development lifecycle. This is an opportunity to work closely with engineering, platform, architecture and product teams, helping to embed secure-by-design principles across a complex technology environment. You will provide technical leadership, practical guidance and constructive challenge, while supporting a culture in which security is considered a shared responsibility.

Your responsibilities will include defining and improving application security standards, reviewing designs and code, conducting threat modelling, and identifying vulnerabilities across web applications, APIs, cloud services and supporting infrastructure. You will help integrate security controls into CI/CD pipelines and development workflows, ensuring that automated testing, dependency management, secrets protection and security monitoring are effective and proportionate. You will also lead or support vulnerability assessments, coordinate remediation activity, investigate security issues, and advise on appropriate mitigations. Clear documentation, meaningful reporting and the ability to communicate risk to both technical and non-technical audiences will be essential.

You will bring substantial experience in application or product security, with a strong understanding of secure software development practices and common vulnerabilities such as those described by OWASP. Experience with threat modelling methodologies, source code analysis, dynamic testing, software composition analysis and cloud security tooling is highly desirable. You should be comfortable working with modern programming languages, APIs, containers and infrastructure-as-code, and have practical experience embedding security within agile delivery teams. Relevant professional qualifications or certifications are welcome, but demonstrable expertise and sound judgement are equally important. We are looking for someone collaborative, curious and pragmatic, who can influence without relying on authority and who is committed to continuously improving security outcomes.

We are seeking a Senior Application Security Engineer to help strengthen the security of modern software applications throughout their development lifecycle. In this role, you will work closely with engineering, architecture, DevOps, and product teams to embed secure-by-design principles into application development, deployment, and operations. You will contribute to security strategy, establish practical standards, and support teams in delivering resilient, secure services without compromising delivery speed or user experience.

Your responsibilities will include conducting application security assessments, threat modelling, secure code reviews, and vulnerability analysis across web, mobile, API, cloud, and distributed systems. You will design and improve security controls within CI/CD pipelines, manage and tune application security tooling, and help define effective remediation processes. You will investigate complex vulnerabilities, assess their business impact, recommend risk-based solutions, and track issues through to resolution. The role will also involve developing security guidance, reusable patterns, training materials, and developer-focused advice to promote strong security practices across the organisation. You may contribute to incident response, penetration testing coordination, security architecture reviews, and the continuous improvement of application security metrics and reporting.

To succeed in this position, you should have substantial experience in application security, software engineering, or a closely related discipline, with strong knowledge of secure development methodologies and common vulnerability classes such as those outlined by OWASP. Practical experience with threat modelling, source code analysis, dynamic testing, dependency management, cloud security, APIs, authentication, authorisation, and security automation is essential. Familiarity with programming or scripting languages such as Java, C#, Python, JavaScript, or Go is desirable, along with experience using tools such as SAST, DAST, SCA, and container security platforms. Relevant professional certifications are beneficial but not required. We value clear communication, sound judgement, curiosity, and the ability to influence technical decisions while collaborating effectively with stakeholders at all levels.

We are seeking a Senior Application Security Engineer to help evaluate the security, reliability, and misuse resistance of AI-generated code. In this role, you will design and execute assessments that identify vulnerabilities, insecure coding patterns, and potential weaknesses in software produced by advanced AI systems. You will work across application security, secure software development, and AI evaluation, helping establish practical standards for measuring code quality and security at scale.

Your responsibilities will include developing threat models, security test plans, and automated evaluation frameworks for AI-generated applications and code snippets. You will review outputs for vulnerabilities such as injection, authentication and authorization flaws, insecure data handling, supply-chain risks, cryptographic weaknesses, and unsafe use of APIs or cloud services. You will create adversarial test cases, investigate emerging attack techniques, reproduce findings, and clearly document their impact, severity, and remediation guidance. You will also collaborate with engineering, research, and product teams to improve evaluation methodologies, refine security benchmarks, and translate technical findings into actionable recommendations.

The successful candidate will have substantial experience in application security, secure code review, vulnerability research, or penetration testing, along with strong knowledge of common web, API, cloud, and software supply-chain risks. Experience with Python or another programming language, security automation, static or dynamic analysis, and modern development workflows is expected. Familiarity with machine learning systems, large language models, prompt-based attacks, or AI-assisted software development is highly desirable. You should be comfortable working independently in an evolving technical environment, challenging assumptions, and communicating complex security issues to both specialist and non-specialist audiences. A methodical approach, strong written communication skills, and a genuine interest in the safe and responsible use of AI are essential.

We are seeking a Senior Systems Engineer – Application Security to strengthen the security, reliability, and performance of critical applications and supporting infrastructure. In this role, you will work closely with software engineering, platform, operations, and risk teams to embed security throughout the application lifecycle, from design and development through deployment and ongoing maintenance. You will provide technical leadership on secure architecture, systems hardening, vulnerability management, identity and access controls, and cloud security practices.

Your responsibilities will include reviewing application and infrastructure designs, identifying security risks, and recommending practical, scalable improvements. You will develop and maintain security standards, controls, and engineering patterns; support threat modelling and security assessments; and help integrate automated security testing into CI/CD pipelines. You will investigate vulnerabilities and security incidents, coordinate remediation activities, and contribute to root-cause analysis and preventative measures. The role will also involve monitoring security telemetry, improving detection and response capabilities, supporting compliance requirements, and producing clear technical documentation for engineering and leadership audiences.

To succeed, you will have substantial experience in systems engineering, application security, DevSecOps, or a related discipline, together with a strong understanding of secure software development and modern infrastructure technologies. You should be confident working with cloud platforms, containers, APIs, operating systems, networking, databases, and infrastructure-as-code tools. Practical knowledge of vulnerability scanning, source code analysis, penetration testing principles, security information and event management, and identity technologies is highly desirable. Strong scripting or programming skills, excellent problem-solving ability, and experience influencing technical teams without direct authority are essential. Relevant professional certifications in security, cloud, or systems engineering would be advantageous. You will be expected to communicate complex risks clearly, balance security with usability and delivery objectives, and promote a collaborative, security-conscious engineering culture.

We are seeking a Senior Application Security Engineer (AI) to strengthen the security of AI-enabled products, platforms, and software applications. You will work closely with software engineers, machine learning specialists, platform teams, and product stakeholders to identify and reduce security risks throughout the development lifecycle. The role combines hands-on technical work with security guidance, helping teams build resilient applications while enabling the safe adoption of artificial intelligence technologies.

Your responsibilities will include designing and implementing application security standards, threat models, and secure development practices for web services, APIs, cloud infrastructure, and AI systems. You will conduct security reviews, code and architecture assessments, vulnerability assessments, penetration testing, and security testing of machine learning pipelines, model integrations, data flows, and agentic systems. You will investigate vulnerabilities, support remediation, and improve security tooling and automation across CI/CD pipelines. You will also help address AI-specific risks such as prompt injection, insecure model outputs, data leakage, model supply-chain threats, excessive agency, and misuse of sensitive training or operational data.

The successful candidate will bring substantial experience in application or product security, secure software development, and modern cloud environments. Strong knowledge of common vulnerability classes, security frameworks, identity and access management, encryption, API security, and DevSecOps practices is required. Experience securing machine learning applications, large language model integrations, or AI development workflows is highly desirable. You should be comfortable reviewing code in languages such as Python, JavaScript, Java, or Go, and familiar with tools for source-code analysis, dependency scanning, dynamic testing, and cloud security. Excellent communication skills are essential, as you will translate complex risks into practical recommendations, influence engineering decisions, and promote a strong security culture across technical and non-technical teams.

We are seeking a Senior Application Security Engineer to help strengthen the security of modern software products and services across their full development lifecycle. In this role, you will work closely with software engineers, architects, product teams and infrastructure specialists to embed secure-by-design principles into applications, platforms and delivery processes. You will help shape security standards, provide pragmatic guidance and support teams in identifying and addressing risks without unnecessarily slowing innovation.

Your responsibilities will include conducting threat modelling, reviewing application and infrastructure designs, and performing or coordinating security assessments, code reviews and penetration testing. You will analyse findings from automated and manual testing, support vulnerability triage and remediation, and advise on appropriate risk treatment. You will contribute to secure development standards, reusable security patterns and developer enablement through training, documentation and hands-on coaching. You will also help improve application security tooling, including software composition analysis, static and dynamic testing, secrets detection and security monitoring within CI/CD pipelines.

To succeed, you will have substantial experience in application or product security, with strong knowledge of secure software development practices, common vulnerabilities and recognised frameworks such as OWASP. You should be comfortable reviewing code in one or more programming languages and working with cloud-native architectures, APIs, containers and modern DevOps practices. Experience with threat modelling methodologies, security automation and incident or vulnerability management is highly desirable. Strong communication skills are essential, as you will need to explain complex security issues clearly to both technical and non-technical audiences and influence positive change across distributed teams. This is a remote role for candidates based in the United Kingdom, with occasional collaboration across working hours and potential travel for team or business events.

We are seeking a Senior Application Security Engineer to help strengthen the security of software products and services delivered across a fast-paced, technology-focused environment. Working remotely within the United Kingdom, you will partner with engineering, platform, product and operations teams to embed security throughout the software development lifecycle. You will provide practical guidance, encourage secure-by-design practices and help teams deliver resilient applications without compromising speed or usability.

Your responsibilities will include defining and improving application security standards, threat modelling new and existing services, and conducting secure design reviews, code reviews and targeted security assessments. You will support the effective use of automated and manual testing tools, including static and dynamic analysis, dependency scanning and software composition analysis. You will investigate vulnerabilities, assess risk, agree remediation plans and track issues through to resolution. You will also contribute to security architecture decisions, incident response activities, security metrics and the continuous improvement of policies, processes and developer education. Clear documentation and the ability to communicate technical risks to both technical and non-technical stakeholders will be essential.

You should have substantial experience in application or product security, with a strong understanding of secure software development and common vulnerability classes such as those described by OWASP. Experience with cloud environments, modern web applications, APIs, CI/CD pipelines, infrastructure as code and containerised workloads is highly desirable. Familiarity with programming or scripting languages such as Python, JavaScript, Java, Go or similar will be useful, as will experience integrating security tools into development workflows. Relevant professional certifications are welcome but not essential. We are looking for someone who is collaborative, curious and confident challenging assumptions, with the judgement to prioritise risk and the communication skills to influence teams effectively in a remote working environment.

We are seeking a Senior Application Security Engineer to strengthen security across the software development lifecycle and help build resilient, secure applications at scale. In this role, you will partner with engineering, architecture, infrastructure, and product teams to identify and address security risks from design through deployment. You will define application security standards, provide practical guidance to development teams, and promote secure coding practices through coaching, documentation, and targeted enablement.

Your responsibilities will include conducting threat modelling, architecture and design reviews, secure code reviews, and application security assessments. You will support and improve security testing across CI/CD pipelines, including the effective use of static application security testing, dynamic testing, software composition analysis, secrets detection, and infrastructure-as-code scanning. You will investigate vulnerabilities, assess business impact, prioritise remediation, and work with engineering teams to verify fixes. You will also contribute to vulnerability management, security metrics, incident response, penetration testing coordination, and the continual improvement of application security processes and tooling.

The successful candidate will bring substantial experience in application or product security, with strong knowledge of secure software development principles, common vulnerability classes, and standards such as OWASP Top 10 and ASVS. Proficiency in at least one programming or scripting language, familiarity with modern cloud environments and containerised applications, and hands-on experience integrating security tools into development workflows are expected. You should be comfortable communicating technical risks to both specialist and non-specialist audiences, influencing without direct authority, and balancing security requirements with delivery objectives. Relevant professional certifications or equivalent practical experience are desirable.

We are seeking a Mobile Application Senior Security Engineer to strengthen the security of mobile products and services across their full development lifecycle. You will work closely with mobile developers, architects, product managers, and security specialists to identify risks, design resilient solutions, and embed secure engineering practices into iOS and Android applications. This role is suited to an experienced security professional who can combine hands-on technical expertise with the ability to influence teams and improve security maturity.

Your responsibilities will include conducting mobile application security reviews, threat modelling, architecture assessments, code reviews, and penetration testing. You will investigate vulnerabilities, assess their impact, recommend practical remediation, and support teams through resolution and validation. You will help define secure coding standards, authentication and authorisation controls, cryptographic implementations, data protection measures, API security requirements, and mobile application hardening techniques. You will also contribute to security tooling, automated testing, software supply chain assurance, incident investigations, and the continuous improvement of mobile security processes.

Applicants should have significant experience securing native and cross-platform mobile applications, with strong knowledge of iOS and Android security models, common mobile attack techniques, and recognised industry frameworks such as OWASP MASVS and OWASP Mobile Top 10. Experience with Swift, Objective-C, Kotlin, Java, mobile reverse engineering, application instrumentation, and tools such as Burp Suite, Frida, MobSF, or equivalent technologies is highly desirable. You should be comfortable analysing source code and binaries, assessing APIs and cloud integrations, and communicating technical risks to both specialist and non-specialist audiences. Relevant security certifications or demonstrable expertise in application security are advantageous. A proactive mindset, strong judgement, excellent communication skills, and the ability to work independently while collaborating across multidisciplinary teams are essential.