Application Security Engineer

Spencer Rose Ltd; Easter Howgate; On-site; GBP 72,000 - 85,000; Full time

Job summary

A reputable financial services business is seeking an Application Security Engineer based in the UK to support a significant technology transformation. The role involves providing security input into design, automating security fixes, and conducting threat modeling. The ideal candidate will have experience in security roles, proficiency in tools like Python and Jenkins, and relevant certifications such as CISSP. This is an exciting opportunity to be a part of a key transformation journey with technical exposure and rapid progression potential.

Benefits

Great benefits

Qualifications

• Experience in a similar role, in both responsibility and scale.
• Proficiency with Python, Jenkins, Powershell, Bash or GitHub Actions.
• Strong understanding of shift left in security processes.

Responsibilities

• Provide security input into solution design at platform/software level.
• Automate tooling to run security fixes over various repositories.
• Conduct threat modelling and pen testing for threat identification.

Skills

Python

Jenkins

Powershell

Bash

GitHub Actions

Education

CISSP

SANS

Crest/CHECK

Job description

Application Security Engineer

Bristol or Edinburgh

£85,000 + great benefits

An impressive financial services business is looking to hire an Application Security Engineer to support this team with the risk and remediation activities. This business is going through a big technology transformation programme that is estimated to take 3-5 years. The successful Application Security Engineer will be part of this journey and have great technical exposure and the ability to rapidly progress. Working closely in one of transformation projects, the successful Application Security Engineer will work closely with the wider security and technology teams to define the strategy and roadmap of technology changes moving forward.

Duties and Responsibilities

• Provide security input into solution design to ensure that security principles are incorporated at both the platform and software level
• Automate tooling to run security fixes over a variety of repo's
• Ensure that security requirement input is provided across the programme to ensure that the new technology is secure by design
• Support the teams to interpret security requirements of the project
• Conduct threat modelling and pen testing to identify threats and establish controls
• Support wider teams with security advice and guidance in both a verbal and written format
• Lead delivery of hands‑on security engineering solutions when needed

Your Background

The ideal Application Security Engineer will have:

• Experience in a similar role, in both responsibility and scale
• Proficiency with one of the following: Python, Jenkins, Powershell, Bash, GitHub Actions
• Relevant professional certifications for example:
• CISSP
• SANS
• Crest/CHECK
• Strong understanding of shift left
• Proven experience with working with development teams on security related topics
• Either hands‑on secure software development or applications security testing
• Likely come from a pen testing, SRE, or Software Development Background

We invite individuals from underrepresented groups to apply for any of our roles and are committed to supporting accessibility needs.