Application Security Engineer

Lancaster University; Lancaster; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

A leading educational institution is seeking a proactive Application Security Engineer to bolster their IT Security Team. This role focuses on mitigating security vulnerabilities throughout the application development lifecycle, implementing best practices and tools while ensuring secure designs for cloud services. You will guide engineering teams, conduct security assessments, and document standards. The position offers flexible hybrid working arrangements, promoting a healthy work-life balance and welcoming applicants from diverse backgrounds.

Benefits

Flexible working options

Supportive work environment

Commitment to diversity and equality

Qualifications

• Experience in secure application development practices.
• Familiarity with cloud architecture and security.
• Ability to respond effectively to security incidents.

Responsibilities

• Guide teams in adopting secure development practices.
• Implement and maintain security tools to prevent application attacks.
• Conduct code reviews and evaluate security considerations.

Skills

Detail-oriented

Proactive

DevSecOps principles

Security vulnerability mitigation

Cloud security expertise

Education

Relevant degree in Computer Science or related field

Tools

Security engineering tools

Job description

Lancaster University are looking for a detail‑oriented and proactive Application Security Engineer to join our IT Security Team within the Information Systems Services Department (ISS). This is an exciting opportunity to support the organisation’s cloud enablement strategic and operational projects that enhance teaching, research, student experience, and institutional effectiveness.

As an Application Security Engineer, you will be responsible for identifying and mitigating security vulnerabilities throughout the entire application development lifecycle by implementing effective tools and processes. You will set and maintain security standards for applications, including mobile platforms, APIs, and microservices, utilising DevSecOps principles to proactively strengthen security practices. In addition, you will play a key role in supporting the organisation’s cloud enablement efforts by applying your expertise to ensure that cloud architectures, deployments, and services are designed and implemented securely.

Duties include:

• Use up‑to‑date technical knowledge to guide engineering teams in adopting secure development practices and in triaging and fixing security issues early in the software development lifecycle.
• Research, implement, and maintain security engineering and assurance tools that prevent and detect application attacks while integrating security automation into development pipelines.
• Create and maintain documentation such as standards, templates, and diagrams.
• Respond rapidly and professionally to Information security incidents and manage the situation with appropriate and sensitive handling of affected staff /students.
• Review and assist in the remediation of issues highlighted as part of security scans.
• Conduct and oversee code reviews across all code platforms, ensuring that security considerations are thoroughly evaluated and best practices are consistently applied.
• Act as a subject matter expert and point of contact for secure development practices.
• Identify and create subject specific training for target audience.

The role is primarily based on the Lancaster University Bailrigg campus, with flexible hybrid working options to support a positive work‑life balance.

We welcome applicants from all sections of the community regardless of their age, religion, gender identity or expression, race, disability or sexual orientation, and are committed to promoting diversity, and equality of opportunity.