Senior Application Security Engineer

Salary: £71,000 - 99,000 per year

Requirements:

• Extensive experience in application security, including secure coding practices, threat modelling, vulnerability assessments, and incident response.
• Hands-on experience with security testing tools such as SAST and DAST, and their integration into development pipelines.
• Strong understanding of advanced security concepts including encryption, secure software design, identity management, and API security.
• Experience with cloud security, including AWS and Azure, and securing microservices architectures.
• Proven leadership skills with the ability to guide and mentor other engineers and influence security practices across teams.
• Excellent communication and collaboration skills, with experience working closely with cross-functional teams to improve security posture.
• 4+ years of experience working as a Security Engineer or Application Security Analyst.
• Experience with regulatory frameworks such as GDPR, PCI-DSS, and SOC 2 and their integration into security processes.
• Industry-recognised security certifications such as OSCP, OSCE, or similar.
• Familiarity with the latest security tools and frameworks to proactively identify vulnerabilities and mitigate threats.
• A passion for mentoring and developing others, with a commitment to continuous learning and improvement.

Responsibilities:

• Lead the design and implementation of advanced application security measures, including encryption, secure APIs, and identity management.
• Conduct in-depth threat modelling and risk assessments to identify and mitigate potential security risks.
• Perform manual security assessments, including code reviews.
• Act as a Subject Matter Expert for security breaches, including root cause analysis and corrective actions related to security vulnerabilities.
• Develop and enforce application security policies across multiple engineering teams, ensuring consistency and scalability.
• Mentor and train junior engineers, helping them improve their security knowledge and practices.
• Provide expert advice on security architecture and design for new features and systems.
• Collaborate with engineering and product teams to integrate security requirements into software development lifecycles.
• Champion security initiatives by advocating for prioritisation of security issues and resolution of technical debt.
• Stay up to date with the latest security threats and industry best practices to keep the team proactive in its approach to security.

Technologies:

• API
• AWS
• Azure
• Cloud
• Security
• microservices
• Support

More:

We are Tripadvisor Group, connecting people to experiences worth sharing and aiming to be the worlds most trusted source for travel and experiences. Our brands, technology, and capabilities connect our global audience with partners through rich content, travel guidance, and two-sided marketplaces across experiences, accommodations, restaurants, and other travel categories. We are hiring an experienced Senior Application Security Engineer to join our growing Tripadvisor Experiences team in London, UK on a permanent contract. We offer competitive compensation, annual bonuses, a remote-friendly work your way approach, flexible scheduling, donation matching, tuition assistance, an annual lifestyle benefit, travel perks, employee assistance, health benefits, and a generous referral scheme. Our cultural pillars are traveler first, execution is our edge, and we succeed together, and we are committed to creating an accessible and inclusive experience for all candidates.

last updated 34 week of 2026