Application Security Engineer

Salary: £75,000 - 75,000 per year

Requirements:

• We are looking for someone experienced in application security, with a focus on red team, blue team, or purple team activities.
• We are looking for someone with software development experience or experience contributing to open-source projects.
• We are looking for experience with DAST tools such as Burp Suite, OWASP ZAP, or similar.
• We are looking for experience with SAST/SCA tools such as Snyk, Veracode, Checkmarx, or similar.
• We are looking for proficiency in one or more of the following languages: Python, JavaScript, .NET, or Java.
• We are looking for demonstrated experience with development tools including GitLab/GitHub, Datadog, Jira, Docker, and various IDEs.
• Desirable: experience with cloud services, particularly AWS services like WAF and Cognito.
• Desirable: experience working with Infrastructure as Code, Kubernetes, and containers.
• Desirable: experience with authentication mechanisms such as OpenID Connect, OAuth, and identity providers.

Responsibilities:

• Act as a security champion to foster a secure-by-design approach.
• Support the identification and analysis of web application security vulnerabilities.
• Oversee the daily management of application security platforms to maintain coverage, compliance, and remediation of findings.
• Conduct threat modelling and review application architectures.
• Implement application security controls and proactive measures to prevent security incidents.
• Implement and manage SAST/SCA tooling across application repositories to identify source code risks.
• Scale automated DAST solutions across applications to maximise testing coverage.
• Carry out penetration testing on internally developed applications.

Technologies:

• AWS
• Cloud
• Datadog
• Docker
• GitHub
• GitLab
• Support
• JIRA
• Java
• JavaScript
• Kubernetes
• OWASP
• OAuth
• OpenID
• Python
• Security
• WAF
• Web
• ASP.NET
• API

More:

We are recruiting an Application Security Engineer for a permanent role in London, fully onsite, on behalf of a leading global client in the financial services industry. You will work alongside engineering and IT teams to enhance application security, APIs, and infrastructure by implementing preventative controls and identifying risks through testing. We are looking for someone who speaks the language of developers, thrives in a purple team environment, and has a passion for automation.

last updated 34 week of 2026