Job Description
Are you looking for a new challenge?
Fancy helping us shape the future of motor insurance?
Prima could be the place for you.
Since 2015, we’ve been using our love of data and tech to rethink motor insurance and bring drivers a great experience at a great price. Our story began in Italy, where we’ve quickly become the number one online motor insurance provider. In fact, we’re trusted by over 5 million drivers. And now we’re expanding to help millions more drivers in the UK and Spain.
What you'll do
Define security requirements and design application architectures following a secure-by-default approach.
Conduct threat modeling, code reviews, and penetration testing on cloud-based web and mobile apps to proactively identify vulnerabilities.
Implement, manage, and automate SAST/DAST/SCA security controls and WAF rules to enforce protection at scale.
Partner with Product teams to ensure robust protection and foster a security-first development culture.
Participate in the investigation, management, and resolution of security alerts.
Collaborate on all core activities and initiatives of the Security Engineering team.
What we're looking for
Strong knowledge of web/mobile security vulnerabilities, AI security risks, and industry standards (e.g., OWASP Top 10, CWE).
Hands-on experience with threat modeling frameworks (e.g., STRIDE), code reviews, penetration testing, and SAST/DAST/SCA tools.
Proficiency in scripting/programming (e.g., Python, Rust) and experience with CI/CD systems and Infrastructure as Code (e.g., Pulumi).
Availability for on-call shifts to guarantee 24x7 security monitoring and support.
Self-motivated and proactive problem-solvers with strong English communication skills and experience in Agile environments.
Nice-to-have
Practical experience with secure AWS design/implementation and Kubernetes (EKS) security.
Hands-on experience with WAF configurations (e.g., Cloudflare) and EDR, SIEM, or SOAR platforms.
Relevant industry certifications (e.g., OSCP, OSWA/E, BSCP, PWPA/E, eWPT, or similar).
Active involvement in security research, bug bounty programs, or CTF competitions.
🏁 Grow with us: We may move fast at Prima, but we move together. Get access to learning resources, mentorship and a growth plan tailored to you.
🌈 Thrive and perform: Your best work begins when you feel your best. Enjoy private healthcare, gym discounts, wellbeing programs and mental health support.
Think you’re a match? Apply now.
At Prima, we celebrate uniqueness. If you don’t meet every requirement but are passionate about this role, we still want to hear from you. Innovation thrives on diverse perspectives.
Prima is proud to be an equal opportunity employer. Need accommodations during the process? Email us at ----- Let’s build the future of insurance, together.
Find more English Speaking Jobs in United Kingdom on Arbeitnow
Similar Jobs
Application Security Engineer
Cytix • Manchester
Senior Application Security Engineer
Tripadvisor • London
Senior Application Security Manager
Pleo • London
Senior Application Security Manager
Pleo • United Kingdom
Senior Application Security Consultant
Veracode • London, England, United Kingdom
Security engineer, application security (UK)
Writer • London, UK
How to Apply
About Prima
Prima
London
Frequently Asked Questions
Where is the Application Security Engineer position at Prima located?
The Application Security Engineer role at Prima is based in London.
What type of employment is the Application Security Engineer role at Prima?
This Application Security Engineer position is offered as Permanent Employment.
What skills are needed for the Application Security Engineer role at Prima?
Key skills and focus areas for this role include Engineering.
How do I apply for the Application Security Engineer position at Prima?
You can apply for the Application Security Engineer role at Prima directly from this page. Create a professional, ATS-ready resume with Clever CV to strengthen your application before you apply.