Senior Application Security Engineer

Salary: £67,000 - 107,000 per year

Requirements:

• We are looking for someone with a passion and drive to succeed in Application Security.
• We want someone who understands the Software Development Life Cycle.
• Desirable: a software engineering background.
• Desirable: experience working with the OWASP ASVS framework.
• Desirable: experience in Agile delivery environments.
• Desirable: greenfield experience setting up security technologies from scratch.
• Desirable: outgoing and able to build relationships with key stakeholders.
• We are looking for a can-do attitude and willingness to take on a wide range of security issues.
• We want someone who keeps up to date with security developments.
• We want someone keen to engage with the security community on a range of topics.
• We want a fast learner.

Responsibilities:

• Establish and lead a security champions programme across our development squads.
• Build functional and non-functional requirements for the application in conjunction with our product team.
• Input abuse case stories into our product backlog.
• Evangelise security across the product team and ensure security stories are prioritised against feature goals.
• Assess SDLC security gap risks and propose remedies.
• Instruct and guide developers on how to conduct threat modelling during application design.
• Act as the single point of contact for security concerns arising from the development team and provide advice on technical software issues.
• Lead the pentesting cadence around the core application by conducting hacking exercises.
• Provide application code reviews against known development frameworks such as OWASP ASVS.
• Provide input into the design of functional and non-functional security controls such as customer authentication workflows.
• Run security champion sessions to keep developers aware of security developments.
• Establish security into the CI/CD pipeline such as SAST, IAST and DAST.
• Automate and build security tools to test our applications.
• Integrate testing, build failures and outputs to the development team to ensure passage to production is secure.
• Create security tests for code and assist developers in building security unit testing.
• Provide responsive support to our development teams.
• Analyse logs to identify issues and provide solutions.
• Research projects, including prototyping, to explore future opportunities.
• Investigate new technologies.
• Optimise the infrastructure deployment process through automation, in-house and open source solutions.
• Develop new skills by working with other members of the team.
• Work with the Team Lead to identify training goals.
• Lead and partake in technical discussions within the team.
• Actively identify and complete opportunities for self-training and external training.
• Drive the teams process of continual improvement.

Technologies:

• AI
• CI/CD
• Cisco
• Support
• OWASP
• Security
• Slack
• Agentic AI
• Cloud

More:

We are Matillion, the company behind Maia, the AI Data Automation platform. We help organisations like Cisco, DocuSign and Slack eliminate manual data engineering work and move faster in the AI economy. We started in Manchester and now we are global, with teams across the UK, US and India. We offer a flexible working culture with hybrid working, company equity, 30 days holiday plus bank holidays, 5 days paid volunteering leave, private health insurance, life insurance, pension and access to mental health support. This AppSec Engineer role sits within our IT and Security team in Manchester and focuses on embedding security into our product and engineering teams through a SecDevOps approach. The role is full time and hybrid, with an estimated annual salary range of 71,440 to 107,160. We hire for potential, value curiosity and high standards, and we are committed to equal opportunity, diversity and inclusion.

last updated 36 week of 2026