Senior Application Security Engineer

Salary: £? - ? per year

Requirements:

• We require 5+ years of experience as an Information Security Researcher or Engineer.
• We require 3+ years of experience manually auditing source code, or strong programming skills in Java, .NET, Python, or JavaScript frameworks.
• We require a strong understanding of OWASP Top 10, API security risks, and cloud-native application architecture.
• We require proven experience in application penetration testing and security code review.
• We require experience with SAST, DAST, IAST, and SCA tools and processes.
• We require a solid understanding of CI/CD pipelines and DevSecOps principles.

Responsibilities:

• We will serve as an application security subject matter expert, guiding internal development teams.
• We will perform code reviews, penetration tests, and architectural reviews on existing and new applications.
• We will develop, implement, and communicate vulnerability mitigation strategies.
• We will handle externally reported vulnerabilities.
• We will drive the static and dynamic application security testing (SAST/DAST) programme.
• We will advise development teams on secure SDLC best practices.

Technologies:

• API
• CI/CD
• Cloud
• DevSecOps
• Java
• JavaScript
• OWASP
• Python
• Security
• ASP.NET

More:

We are working with a leading technology client on a customer assignment for a Senior Application Security Engineer based in London, UK. This is a 6-month contract at a rate of £575 per day, inside IR35, dependent on experience. The role offers the opportunity to work with a world-class business and gain access to strong learning and development opportunities while collaborating with an exciting customer.

last updated 34 week of 2026