Application Security Engineer

Morson Edge; Cambridgeshire and Peterborough; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A leading security solutions provider in the UK is seeking an experienced Application Security Specialist to join their team. This hybrid role involves guiding security best practices, collaborating with development teams, and automating vulnerability detection processes. Candidates should have at least 5 years of combined experience in software engineering and application security, alongside knowledge of OWASP. A competitive package and several benefits, such as private healthcare and flexible working hours, are on offer.

Benefits

Private healthcare (including dental)

Pension contributions

Employee Assistance Programme & wellbeing support

Life insurance

Annual performance bonus

Enhanced family leave from day one

Flexible working hours

25 days holiday + bank holidays

Qualifications

• 3+ years in software engineering plus 2+ years in application security.
• Strong knowledge of application vulnerabilities and security testing techniques.
• Experience with Agile/DevOps methodologies.

Responsibilities

• Guiding teams on security best practices.
• Collaborating with architects and developers to review code.
• Automating processes for vulnerability detection.

Skills

OWASP understanding

Secure coding

Automation

Strong communication skills

Incident response

Vulnerability detection

Job description

Application Security Specialist (DevOps)

Hybrid Cambridge, UK (1 day a week in office)

We re looking for an experienced Application Security Specialist to join a growing cyber security team and play a key role in shaping a world-class application security programme.

This role will give you the chance to work closely with engineering and development teams, embedding security into the development lifecycle, driving automation, and influencing remediation plans that have real impact.

What you ll be doing

• Guiding teams on security best practices, compliance, and secure coding.

• Collaborating with architects and developers to review designs and code for vulnerabilities.

• Embedding/improving threat modelling and secure development practices into the SDLC.

• Designing and integrating security testing plans.

• Performing and overseeing application security testing and driving remediation.

• Managing end-to-end vulnerability workflows, including bug bounty findings.

• Supporting incident response activities when needed.

• Monitoring and reporting on application security metrics, KPIs, and emerging threats.

• Automating processes for vulnerability detection and integrating tools into the pipeline.

Note: this position includes participation in an on-call rotation.

What we re looking for

• 3+ years in software engineering plus 2+ years in application security.

• Strong knowledge of OWASP, application vulnerabilities, and security testing techniques.

• Experience with secure web application development and Agile/DevOps methodologies.

• Familiarity with pen testing, bug bounty, or hacker community collaboration.

• Strong communication skills able to influence stakeholders up to senior management.

• Self-starter with the ability to prioritise, work independently, and drive initiatives.

• Knowledge of wider IT and information security practices.

What s on offer

You ll enjoy a competitive package along with a range of benefits, including:

• Private healthcare (including dental).

• Pension contributions.

• Employee Assistance Programme & wellbeing support.

• Life insurance.

• Annual performance bonus.

• Enhanced family leave from day one.

• Flexible working hours.

• 25 days holiday + bank holidays (with buy/sell options).