App Security Engineer: Threat Modeling & Secure Design

Motability Operations Limited; City of Edinburgh; Hybrid; GBP 70,000 - 90,000; Full time

Benefits offered by this job

Annual discretionary bonus

15% non-contributory pension

Life assurance 4x salary

Employee Discount Scheme

Cycle to Work Scheme

Job summary

Motability Operations Limited is seeking an experienced Application Security Engineer to cover a 12‑month period. You will work with product teams to reduce security risk across Customer B2C and Connected Mobility domains, providing hands-on security engineering and guidance from design through release.

You will triage findings, coordinate with security teams, and help teams implement automated checks in CI/CD. Familiarity with Java/Spring Boot, React/Node.js, and cloud platforms is beneficial.

Qualifications

• Experience in application security engineering across design, development and release.
• Ability to triage risks and communicate remediation clearly to engineers.
• Familiarity with modern cloud environments and CI/CD security practices.

Responsibilities

• Provide hands-on application security engineering for Customer B2C and Connected Mobility domains during a 12 month cover period.
• Act as day-to-day security contact for domains, escalate risks and coordinate with security owners.
• Advise on secure design; facilitate threat modelling and translate findings into prioritised security requirements.
• Promote automated security checks in development and CI/CD workflows (code, dependencies, configurations).
• Coordinate penetration testing and track findings through remediation and retesting.
• Assess security of SaaS platforms, external APIs and OEM integrations with relevant teams.

Skills

Threat modelling

Secure by design

Vulnerability management

Communication

CI/CD security

Education

Bachelor's degree in CS or related field

Tools

SAST tools

Software composition analysis

Kubernetes/OpenShift

Snyk/Wiz

Job description

Motability Operations Limited is seeking an experienced Application Security Engineer to cover a 12‑month period. You will work with product teams to reduce security risk across Customer B2C and Connected Mobility domains, providing hands-on security engineering and guidance from design through release.

You will triage findings, coordinate with security teams, and help teams implement automated checks in CI/CD. Familiarity with Java/Spring Boot, React/Node.js, and cloud platforms is beneficial.