Application Security Engineer

Barclay Simpson; City Of London; Hybrid; GBP 51,000 - 85,000; Full time

Job summary

Barclay Simpson is seeking an experienced Application Security Engineer to join its security function in a hybrid role across the UK. The position focuses on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle.

You will perform pre-release manual PenTesting and threat modelling, with strong emphasis on OWASP Top 10, Veracode tooling, and cloud security in Azure or AWS. Kali Linux experience is also valued.

Qualifications

• Strong application security experience, including OWASP Top 10 and Veracode.
• Experience with DevSecOps/CI/CD and cloud security across Azure and/or AWS.
• Experience with Kali Linux and some manual PenTesting.

Responsibilities

• Focus on secure code reviews, SAST/DAST, and vulnerability assessments across the CI/CD lifecycle.
• Pre-release manual penetration testing and threat modelling.

Skills

OWASP Top 10

DevSecOps/CI/CD

Cloud security (Azure/AWS)

Kali Linux

PenTesting (manual)

Tools

Veracode

Job description

We're working with a leading UK financial services organisation looking for an experienced Application Security Engineer to join its security function.

You'll work closely with engineering and DevSecOps teams, focusing on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle. You will also do some pre-release manual PenTesting and threat modelling work.

You'll need strong application security experience, including OWASP Top 10, Veracode or similar scanning tools, DevSecOps/CI/CD and cloud security across Azure and/or AWS. You will also need experience of Kali Linux and some manual PenTesting skills (from either work or home).

The role is offered as hybrid in either London, Manchester or Glasgow. You will be required in the office around once a week.

Salary up to £85k + good bonus potential.

No visa sponsorship available.