AI-Driven AppSec Engineer (Java) – DevSecOps Focus

Caspian One; Greater London; On-site; GBP 70,000 - 110,000; Full time

Job summary

Caspian One partners with a leading Investment Bank to hire an experienced Application Security Engineer with a strong Java background. You will join a growing security function focused on identifying, validating, and driving remediation of vulnerabilities across a large banking environment.

The role sits at the intersection of AppSec, software engineering, and AI-driven security analysis, acting as the link between security and development teams to ensure risks are understood, owned, and

Qualifications

• Strong background in Application Security (AppSec).
• Experience with vulnerability triage and security assessments.
• Understanding of common vulnerabilities and attack paths.
• Experience with SAST and code analysis tooling.
• Ability to assess exploitability and business impact.

Responsibilities

• Review vulnerability findings and AI-assisted assessments.
• Validate genuine risks vs false positives.
• Investigate attack paths and exploitability.
• Collaborate with development teams to plan remediation.
• Explain security findings to technical and non-technical stakeholders.
• Ensure each vulnerability has an owner and plan.
• Track remediation and governance of findings.
• Help enhance AI-driven security tooling.
• Collaborate across Retail Banking, Investment Banking, Markets, and other units.
• Establish best practices for secure software development.

Skills

Application Security

Vulnerability triage

Security assessments

Java development

DevSecOps

Cloud-native apps

Containers

Cross-functional communication

Tools

SAST tooling

Code analysis tooling

Job description

Caspian One partners with a leading Investment Bank to hire an experienced Application Security Engineer with a strong Java background. You will join a growing security function focused on identifying, validating, and driving remediation of vulnerabilities across a large banking environment.

The role sits at the intersection of AppSec, software engineering, and AI-driven security analysis, acting as the link between security and development teams to ensure risks are understood, owned, and