Senior Application Security Engineer - Hybrid (Cambridge)

Redgate; Town Of Cambridge; Hybrid; AUD 115,000 - 143,000; Full time

Benefits offered by this job

Hybrid work

Wellbeing allowance

Paid time off

Learning investment

Private health insurance

Job summary

Redgate in Cambridge is seeking a security-minded engineer to embed security into the software development lifecycle across multiple product teams. You will define security requirements, triage threats, and govern risk with real technical authority.

This role offers a flexible hybrid in-office pattern, opportunities to specialise in AI security and cloud-native technologies, and a supportive environment focused on learning, development, and career progression.

Qualifications

• Hands-on product or application security experience embedded in modern SDLC.
• Ability to review code and clearly communicate issues to developers (C# focus, Java/Python exposure).
• Strong knowledge of OWASP Top 10 and practical mitigations.
• Experience enhancing SAST/DAST: tuning, triage workflows, reducing noise.
• Understanding of cloud and container security, ideally AWS and Docker.

Responsibilities

• Partner with engineering and product teams to define and operationalise security across the full SDLC.
• Own or co-own application security governance: secure-by-default standards, patterns, guardrails, and risk exceptions.
• Lead threat modelling for new features and architectural changes, turning findings into practical engineering work.
• Drive SAST/DAST adoption and quality, including tool tuning and developer triage guidance.
• Support product teams adopting AI, including LLMs and MCP, providing visibility into security work.

Skills

Security in SDLC

Code review (C#), Java, Python

OWASP Top 10

SAST/DAST processes

Cloud security fundamentals

Docker

AWS

Tools

AWS

Docker

Job description

Redgate in Cambridge is seeking a security-minded engineer to embed security into the software development lifecycle across multiple product teams. You will define security requirements, triage threats, and govern risk with real technical authority.

This role offers a flexible hybrid in-office pattern, opportunities to specialise in AI security and cloud-native technologies, and a supportive environment focused on learning, development, and career progression.