Application Security Engineer

Jackalope Digital LLC; Greater London; Hybrid; GBP 65,000 - 105,000; Full time

Job summary

Prima is hiring an Application Security Engineer to join its Security Engineering Team. The role focuses on designing secure architectures, threat modeling, and proactive security testing for cloud-based web and mobile apps.

You'll implement security controls, work with Product teams to ensure robust protection, and participate in incident response. This is a full remote role with flex options for Italy, Spain, or the UK, backed by a culture of learning and growth.

Qualifications

• Strong knowledge of web/mobile security vulnerabilities (OWASP Top 10).
• Experience with threat modeling frameworks (STRIDE), code reviews, pen testing, and SAST/DAST/SCA tools.
• Proficiency in Python or Rust and experience with CI/CD and Infrastructure as Code (Pulumi).
• Availability for on-call shifts and strong English communication in an Agile environment.

Responsibilities

• Define security requirements and design secure architectures.
• Conduct threat modeling, code reviews, and penetration testing on cloud apps.
• Implement, manage, and automate security controls and WAF rules at scale.
• Partner with product teams to foster a security-first development culture.
• Respond to security alerts and participate in incident management.
• Collaborate across the Security Engineering team on core initiatives.

Skills

Web security

Threat modeling

Code reviews

Penetration testing

SAST/DAST/SCA tools

CI/CD

Infrastructure as Code

Python

Rust

On-call availability

English communication

Agile methodology

Tools

Pulumi

WAF (Cloudflare)

AWS

Kubernetes (EKS)

Job description

Are you looking for a new challenge?

Fancy helping us shape the future of motor insurance?

Prima could be the place for you.

Since 2015, we’ve been using our love of data and tech to rethink motor insurance and bring drivers a great experience at a great price. Our story began in Italy, where we’ve quickly become the number one online motor insurance provider. In fact, we’re trusted by over 5 million drivers. And now we’re expanding to help millions more drivers in the UK and Spain.

We need a Application Security Engineer to join our Security Engineering Team.

The Engineering Department is the beating heart of Prima. You’ll be joining over 350 engineers across software development, infrastructure, operations and security: fueled by curiosity, experimentation and collaboration, you’ll help deliver scalable, impactful solutions that shape the future of insurance.

Excited to make an impact? Here are the details

What you'll do

• Define security requirements and design application architectures following a secure-by-default approach.
• Conduct threat modeling, code reviews, and penetration testing on cloud-based web and mobile apps to proactively identify vulnerabilities.
• Implement, manage, and automate SAST/DAST/SCA security controls and WAF rules to enforce protection at scale.
• Partner with Product teams to ensure robust protection and foster a security-first development culture.
• Participate in the investigation, management, and resolution of security alerts.
• Collaborate on all core activities and initiatives of the Security Engineering team.

What we're looking for

• Strong knowledge of web/mobile security vulnerabilities, AI security risks, and industry standards (e.g., OWASP Top 10, CWE).
• Hands-on experience with threat modeling frameworks (e.g., STRIDE), code reviews, penetration testing, and SAST/DAST/SCA tools.
• Proficiency in scripting/programming (e.g., Python, Rust) and experience with CI/CD systems and Infrastructure as Code (e.g., Pulumi).
• Availability for on-call shifts to guarantee 24x7 security monitoring and support.
• Self-motivated and proactive problem-solvers with strong English communication skills and experience in Agile environments.

Nice-to-have

• Practical experience with secure AWS design/implementation and Kubernetes (EKS) security.
• Hands-on experience with WAF configurations (e.g., Cloudflare) and EDR, SIEM, or SOAR platforms.
• Relevant industry certifications (e.g., OSCP, OSWA/E, BSCP, PWPA/E, eWPT, or similar).
• Active involvement in security research, bug bounty programs, or CTF competitions.

Why you’ll love it here

Work Your Way: Enjoy full flexibility – work from home, the office or a mix of both. Plus, work from anywhere for up to 30 days a year.

This is a full remote position and we're considering candidates located in Italy, Spain or UK.

Grow with us: We may move fast at Prima, but we move together. Get access to learning resources, mentorship and a growth plan tailored to you.

Thrive and perform: Your best work begins when you feel your best. Enjoy private healthcare, gym discounts, wellbeing programs and mental health support.

At Prima, we celebrate uniqueness. If you don’t meet every requirement but are passionate about this role, we still want to hear from you. Innovation thrives on diverse perspectives.

Prima is proud to be an equal opportunity employer. Need accommodations during the process? Email us at ----- Let’s build the future of insurance, together.