Application Security Engineer

Harrington Starr; Greater London; On-site; GBP 65,000 - 100,000; Full time

Job summary

Harrington Starr is seeking an experienced Application Security Engineer to fortify the security of modern applications and expand expertise into AI security within a Microsoft-centric stack.

The role targets professionals who want to deepen their AppSec capabilities, particularly around AI-enabled services and GenAI threats, while collaborating with development teams using Azure and Defender technologies.

Qualifications

• Experience in Application Security / DevSecOps.
• Strong knowledge of web application and API security.
• Experience with threat modelling, vulnerability management and secure SDLC.
• Familiarity with cloud security, ideally Microsoft Azure.
• Excellent communication with engineering teams.

Responsibilities

• Embed security throughout the software development lifecycle.
• Perform application security assessments, threat modelling and vulnerability analysis.
• Work closely with developers, architects and engineering teams to improve secure development practices.
• Help define and implement security controls for AI-enabled applications.
• Develop expertise in AI/ML security risks, including emerging GenAI threats.
• Work with Microsoft security technologies across Azure, Defender, Entra and related services.
• Support security automation and continuous improvement of application security processes.

Skills

AppSec

Threat modelling

Secure SDLC

Web security

API security

Cloud security

Communication with engineering teams

GenAI security

Tools

Azure

Microsoft Defender

Entra

Job description

We’re looking for an Application Security Engineer to join our security team and help strengthen the security of modern applications, with an exciting opportunity to develop deeper expertise in AI Security.

This role would suit an experienced AppSec professional who wants to expand into the rapidly developing area of securing AI-powered applications and services, particularly within the Microsoft ecosystem.

Key responsibilities

• Embed security throughout the software development lifecycle.
• Perform application security assessments, threat modelling and vulnerability analysis.
• Work closely with developers, architects and engineering teams to improve secure development practices.
• Help define and implement security controls for AI-enabled applications.
• Develop expertise in AI/ML security risks, including emerging GenAI threats.
• Work with Microsoft security technologies across Azure, Microsoft Defender, Entra and related services.
• Support security automation and continuous improvement of application security processes.

What we’re looking for

• Experience in Application Security / Product Security / DevSecOps.
• Strong understanding of web application and API security.
• Experience with threat modelling, vulnerability management and secure SDLC practices.
• Familiarity with cloud security, ideally Microsoft Azure.
• Strong communication skills and the ability to work with engineering teams.

Why this role?

This is an opportunity for an established Application Security Engineer to broaden their skill set into AI Security, while working with a modern Microsoft technology stack and gaining hands-on experience in one of the fastest-growing areas of cyber security.