AI-Savvy Application Security Engineer

CloudBees; Greater London; Hybrid; GBP 65,000 - 105,000; Full time

Job summary

CloudBees in London, UK, is seeking a hands-on security-minded engineer to lead secure SDLC and AI security initiatives in a hybrid role.

You will develop secure patterns, perform threat modeling, and guide teams on secure practices for AI, low-code, and enterprise systems.

Travel is required; we offer a diverse, inclusive culture and opportunities to advance in DevSecOps across Jenkins, Cloud, and CI/CD.

Qualifications

• Hands-on security experience in software and enterprise environments.
• Knowledge of SaaS, cloud, IAM, or endpoint security is desirable.
• Proficiency in secure SDLC fundamentals including threat modelling and CI/CD security.
• Comfort writing code in Python, Go, or TypeScript.
• Experience building integrations and automating security workflows.
• Experience with security tools such as SAST, DAST, SIEM, and vulnerability management platforms.

Responsibilities

• Develop secure SDLC standards for internal apps and AI workflows.
• Create patterns, reference architectures, and self-serve documentation for teams.
• Raise security profile with business teams, especially for AI and low-code.
• Conduct threat modeling, risk assessments, and technical security reviews.
• Identify and prioritize security risks; advise on mitigations.
• Translate findings into enterprise controls and detection requirements.
• Design safeguards for enterprise AI tooling, including agents and non-human identities.
• Evaluate and integrate emerging AI/ML security tools.
• Stay current with the AI security landscape.
• Engineer and automate AI-first security workflows at scale.

Skills

Hands-on security experience

Secure SDLC knowledge

Threat modelling

Secure design

Vulnerability management

CI/CD security

Python

Go

TypeScript

Automation of security workflows

SAST/DAST/ SIEM experience

AI/ML security knowledge

Generative AI tools familiarity

Communication skills

Interpersonal skills

Self-starter

Ambiguity tolerance

Tools

Jenkins

Python

TypeScript

CI/CD

Cloud

DevSecOps

IAM

Security tooling

Job description

CloudBees in London, UK, is seeking a hands-on security-minded engineer to lead secure SDLC and AI security initiatives in a hybrid role.

You will develop secure patterns, perform threat modeling, and guide teams on secure practices for AI, low-code, and enterprise systems.

Travel is required; we offer a diverse, inclusive culture and opportunities to advance in DevSecOps across Jenkins, Cloud, and CI/CD.