Application Security Engineer

Sotalent; Greater London; On-site; GBP 70,000 - 110,000; Full time

Job summary

Sotalent is seeking an Application Security Engineer to embed security across the SDLC for globally distributed teams. You will perform security reviews, threat modelling, secure coding, vulnerability management and AI security initiatives.

Responsibilities include leading security reviews, addressing vulnerabilities, assessing risks in AI-enabled applications and coaching engineers on best practices. Strong communication with stakeholders is essential.

Qualifications

• Strong application security experience in complex technology environments.
• Ability to define security controls independently of platforms or technologies.
• Detailed knowledge of the OWASP Top 10 and application security controls.
• Experience with secure coding and application security tools, including SCA, SAST and secrets detection.
• Experience identifying and remediating vulnerabilities throughout the SDLC.
• Experience securing AI-enabled applications and understanding AI/LLM security vulnerabilities.
• Strong threat modelling, security review and code review capabilities.
• Excellent communication and stakeholder management skills.
• Experience guiding and developing software engineers on security best practices.

Responsibilities

• Define security requirements and controls across complex technology environments.
• Lead application security reviews, including threat modelling, architecture and design reviews, security consultations and code reviews.
• Identify and address application vulnerabilities throughout the SDLC.
• Assess security risks in AI-enabled applications and services, including common AI/LLM vulnerabilities.
• Use AI tools and security agents to improve vulnerability analysis and developer enablement.
• Champion secure development practices across engineering teams.
• Translate security principles into practical guidance for technical and non-technical stakeholders.
• Partner with globally distributed development teams across different technologies, languages and methodologies.
• Educate and coach engineers on secure coding and application security best practices.
• Collaborate with technology and business stakeholders to drive sustainable security improvements.
• Balance defensive security practices with an offensive mindset when assessing application vulnerabilities.

Skills

Threat modelling

Secure coding

SCA/SAST

Secrets detection

Vulnerability management

Code reviews

Stakeholder management

AI/LLM security

OWASP Top 10

AI security awareness

Job description

Application Security Engineer – AppSec & AI Security

Employment Type: Full-time

Overview

Application Security Engineer responsible for embedding security throughout the software development lifecycle across globally distributed technology teams. The role combines application security reviews, threat modelling, secure coding, vulnerability management and emerging AI/LLM security.

Key Responsibilities

• Define security requirements and controls across complex technology environments.
• Lead application security reviews, including threat modelling, architecture and design reviews, security consultations and code reviews.
• Identify and address application vulnerabilities throughout the SDLC.
• Assess security risks in AI-enabled applications and services, including common AI/LLM vulnerabilities.
• Use AI tools and security agents to improve vulnerability analysis and developer enablement.
• Champion secure development practices across engineering teams.
• Translate security principles into practical guidance for technical and non-technical stakeholders.
• Partner with globally distributed development teams across different technologies, languages and methodologies.
• Educate and coach engineers on secure coding and application security best practices.
• Collaborate with technology and business stakeholders to drive sustainable security improvements.
• Balance defensive security practices with an offensive mindset when assessing application vulnerabilities.

Requirements

• Strong application security experience in complex technology environments.
• Experience defining security controls independently of specific platforms or technologies.
• Detailed knowledge of the OWASP Top 10 and application security controls.
• Experience with secure coding and application security tools, including SCA, SAST and secrets detection.
• Experience identifying and remediating vulnerabilities throughout the SDLC.
• Experience securing AI-enabled applications and understanding AI/LLM security vulnerabilities.
• Strong threat modelling, security review and code review capabilities.
• Excellent communication and stakeholder management skills.
• Experience guiding and developing software engineers on security best practices.
• Strong learning mindset and interest in emerging application security technologies.