Application Security Engineer

Salary: £55,000 - 95,000 per year

Requirements:

• We are looking for someone with 5+ years of application security experience.
• We are looking for strong hands-on penetration testing and security tooling skills.
• We are looking for deep knowledge of web vulnerabilities, secure coding practices, and cloud environments such as AWS, Azure, or GCP.
• We are looking for familiarity with DevSecOps methodologies and automated security integration.
• We are looking for an open, clear communicator who can explain complex security concepts in plain English to both technical and non-technical teammates.
• We are looking for someone who is highly collaborative, empathetic, and passionate about mentoring engineers.
• We are looking for someone who is curious, proactive, and keen to stay ahead of modern threat landscapes like AI security.

Responsibilities:

• We provide expert guidance on secure coding, threat modelling, and OWASP Top 10 mitigation.
• We promote a security-first mindset across development teams and act as a supportive technical mentor.
• We integrate security assessments, code reviews, and penetration testing into the SDLC.
• We evaluate, implement, and run modern security tooling such as SAST, DAST, and IAST to streamline vulnerability checks.
• We research emerging AI and LLM threat classes to design proactive defensive architectures.
• We participate in incident response investigations and help deliver security training.

Technologies:

• AI
• AWS
• Azure
• Cloud
• DevSecOps
• GCP
• Support
• LLM
• OWASP
• Security
• Web

More:

We insure small businesses and enable big dreams for our customers, our people, and our communities. With over 1,000,000 active insurance policies, we protect builders, bakers, landlords, and more than 1,200 other trades. We are a technology company as well as an insurance company, and we build, fail, learn, and improve together. Through our global social impact strategy, The Big Dreams Project, we are working to help 10,000 small businesses start or grow by 2030. This permanent Technology role is based in London and offers a hybrid working model, manageable workloads, 25 days of annual leave plus bank holidays, the option to buy more holiday, flexible parental leave, private medical insurance, a competitive salary with potential bonus, learning and development support, mental health counselling, pension matching, life assurance, a salary sacrifice car scheme, and flexible benefits including options such as critical illness cover, dental insurance, travel insurance, or a gym membership. We are committed to an inclusive, supportive workplace where colleagues are treated with respect and dignity.

last updated 36 week of 2026