Application Security Engineer

Salary: £62,000 - 88,000 per year

Requirements:

• Practical experience in application security.
• Experience working with software engineers to explain and remediate security issues.
• Familiarity with common web application security risks and secure coding practices.
• Experience with vulnerability triage, prioritisation and remediation tracking.
• Experience using or interpreting findings from tools such as SAST, software composition analysis, secret scanning or similar.
• Experience participating in or supporting threat-modelling activities.
• Ability to write scripts or small tools, ideally in Python, to automate tasks or improve visibility.
• Strong communication and collaboration skills.
• Familiarity with Agile or Scrum ways of working.
• Exposure to AWS security, cloud security or infrastructure-as-code security is desirable.
• Experience with Terraform or CloudFormation is desirable.
• Experience with container or Kubernetes security is desirable.
• Experience with bug bounty, penetration testing or security testing programmes is desirable.
• Experience with Splunk or similar logging/SIEM platforms is desirable.
• Exposure to AI security, such as LLM-enabled applications, AI-assisted development workflows or prompt/data leakage risks, is desirable.
• Experience building dashboards, metrics or reports to support vulnerability management is desirable.
• Relevant security certifications or training, such as AWS security training, secure coding training, GIAC, ISC2, CREST or equivalent practical experience is desirable.

Responsibilities:

• Help improve application security across our cloud-native technology estate.
• Make secure engineering easier for product, platform and software engineering teams.
• Improve developer-friendly security guardrails across GitHub-based CI/CD pipelines, application repositories and engineering workflows.
• Work with SAST, software composition analysis, secret scanning, vulnerability management and secure coding guidance so findings are clear, actionable and owned by the right teams.
• Work closely with engineers to support practical threat modelling.
• Triage application vulnerabilities.
• Improve security playbooks.
• Help teams remediate issues in a pragmatic way.
• Support secure development practices and help security become part of normal delivery rather than a last-minute checkpoint.

Technologies:

• AI
• AWS
• CI/CD
• Cloud
• GitHub
• Support
• Kubernetes
• LLM
• Python
• Security
• Splunk
• Terraform
• Web

More:

We are the Financial Times, one of the worlds leading news organisations, globally recognised for our authority, integrity and accuracy, with a mission to deliver quality information and services worldwide. We offer a warm, collaborative culture where curiosity thrives, ambitious thinking is rewarded, and you can connect with a diverse community of experts who support your growth, career aspirations and wellbeing. This Cyber Security Engineer role is hands-on and focused on application security across our cloud-native technology estate. We offer best-in-class benefits across our offices, including generous annual leave, medical cover, inclusive parental leave packages, subsidised gym memberships and opportunities to give back to the community. We operate a hybrid model requiring staff to work onsite 50% of the time, subject to role requirements and regular review. We are a disability confident employer and Valuable 500 signatory, and we are committed to diversity, equity and inclusion.

last updated 35 week of 2026