Application Security Engineer

Queen Square Recruitment; Coventry; Hybrid; GBP 55,000 - 85,000; Full time

Job summary

Queen Square Recruitment is seeking an Application Security Engineer to join a large-scale enterprise security programme in Coventry. You will work across Azure and AWS WAFs, strengthening API security, authentication, and access management across cloud-native services.

You will embed security controls into CI/CD pipelines and contribute to AI security governance, risk and compliance across AI-enabled platforms.

Qualifications

• Experience in application, cloud or cybersecurity engineering.
• Strong knowledge of OWASP Top 10 and web app security.
• Hands-on WAF experience (Azure WAF and/or AWS WAF).
• Secrets management and CI/CD/DevSecOps exposure.
• Nice to have: AZ-500, SC-100, CISSP.

Responsibilities

• Administer and optimise Azure WAF and AWS WAF policies and controls.
• Run application security assessments across web apps, APIs and cloud native services.
• Strengthen API security, authentication and access management practices.
• Support secrets and key management (Azure Key Vault, AWS KMS).
• Embed security controls into CI/CD pipelines and DevSecOps processes.
• Support AI security governance, risk and compliance activity across AI enabled platforms.

Skills

App security

OWASP Top 10

DevSecOps

CI/CD security

Cloud security

Tools

Azure WAF

AWS WAF

Azure Key Vault

AWS KMS

Job description

Coventry | Hybrid, 3 days onsite

A great opportunity for an Application Security Engineer to join a large scale enterprise security programme, working across Azure, AWS and emerging AI platforms to strengthen application, API and cloud security governance.

What you'll do

• Administer and optimise Azure WAF and AWS WAF policies and controls
• Run application security assessments across web apps, APIs and cloud native services
• Strengthen API security, authentication and access management practices
• Support secrets and key management (Azure Key Vault, AWS KMS)
• Embed security controls into CI/CD pipelines and DevSecOps processes
• Support AI security governance, risk and compliance activity across AI enabled platforms

What you'll need

• Application, cloud or cybersecurity engineering experience
• Strong grasp of OWASP Top 10 and web app security principles
• Hands on WAF experience, ideally Azure WAF and/or AWS WAF
• API security experience (auth, encryption, monitoring)
• Secrets/key management platform experience (Azure Key Vault, AWS KMS or similar)
• SSDLC, CI/CD security and DevSecOps exposure

Nice to have: exposure to Azure OpenAI, Copilot or Claude, AI threat modelling, SAST/DAST/SCA tooling, or certs such as AZ-500, SC-100, CISSP.