Application Security Engineer

Barclay Simpson; Greater London, Manchester, Glasgow; Hybrid; GBP 72,000 - 98,000; Full time

Job summary

Barclay Simpson is partnering with a leading UK financial services organisation to hire an Application Security Engineer. You will focus on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle.

The role requires experience with OWASP Top 10, Veracode, DevSecOps, and cloud security across Azure/AWS, plus Kali Linux for manual testing. Hybrid work in London, Manchester or Glasgow with in-office presence ~1 day per week.

Qualifications

• Proven experience in application security across CI/CD pipelines.
• Hands-on with OWASP Top 10 and security scanning tools such as Veracode.
• Experience with threat modelling and secure design practices.

Responsibilities

• Perform secure code reviews and SAST/DAST to identify and remediate security flaws.
• Embed security principles into the CI/CD pipeline and DevSecOps practices.
• Lead vulnerability assessments and coordinate remediation with engineering teams.
• Conduct pre-release manual penetration testing where applicable.
• Perform threat modelling and security design reviews for new features.

Skills

Secure code reviews

SAST/DAST

Vulnerability assessments

Threat modelling

PenTesting

OWASP Top 10

DevSecOps

CI/CD security

Cloud security

Azure

AWS

Tools

Veracode

Kali Linux

Job description

We’re working with a leading UK financial services organisation looking for an experienced Application Security Engineer to join its security function.

You’ll work closely with engineering and DevSecOps teams, focusing on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle. You will also do some pre-release manual PenTesting and threat modelling work.

You’ll need strong application security experience, including OWASP Top 10, Veracode or similar scanning tools, DevSecOps/CI/CD and cloud security across Azure and/or AWS. You will also need experience of Kali Linux and some manual PenTesting skills (from either work or home).

The role is offered as hybrid in either London, Manchester or Glasgow. You will be required in the office around once a week.

Salary up to £85k + good bonus potential.

No visa sponsorship available.