Application Security Engineer

Schroders Personal Wealth; Leeds; Remote; GBP 58,000 - 65,000; Full time

Job summary

A financial services firm in Leeds is seeking a skilled Application Security Engineer to enhance their security framework. You will collaborate closely with engineering and DevOps teams, ensuring that security is integrated into their software development lifecycle and cloud infrastructure. The role demands strong experience in application security and cloud environments, along with excellent problem-solving and communication skills. This is a fixed-term contract with a competitive salary and great benefits.

Benefits

30 days annual leave plus bank holidays

Company-paid Private Medical Insurance

Matched pension contribution up to 15%

Flexible allowance for personal benefits

Bonus opportunity depending on performance

Access to free financial advice

Qualifications

• Proven experience in application or cloud security engineering roles.
• Strong understanding of secure software development practices.
• Hands on experience of SAST/SCA/Vulnerability Management tools.

Responsibilities

• Collaborate with software engineers to remediate security vulnerabilities.
• Promote secure development practices and integrate security into CI/CD.
• Monitor and track remediation of vulnerabilities across applications.

Skills

Application security experience

Cloud security knowledge

Strong problem-solving skills

Excellent communication skills

Education

Relevant certifications such as OSCP

Tools

SAST tools

SCA tools

Vulnerability management tools

Job description

Overview

Schroders Personal Wealth aims to improve the way financial advice is offered, by making it more affordable, accessible and powerful for more people. We want to change lives for the better.

We are seeking an experienced Application Security Engineer to join our growing security team. This role will play a key part in embedding security into our software development lifecycle and cloud infrastructure. You will work closely with engineering, DevOps, and platform teams to ensure our applications and infrastructure are secure by design, and that vulnerabilities are identified and addressed proactively.

This is a hands-on technical role with a strong focus on collaboration, enablement, and continuous improvement across our security tooling and practices.

Location: National / London

Salary: National £58,782 to £64,660; London £68,561 to £75,417

Type: Fixed Term Contract until 31/12/2026

Closing Date: 11/10/2025

Key Responsibilities

Secure Development Support:

• Collaborate with software engineers to interpret and remediate security vulnerability from Static Application Security Testing (SAST) and Software Composition Analysis (SCA) findings.
• Provide secure coding guidance and support threat modelling activities.
• Promote secure development practices and help integrate security into CI/CD pipelines.

Cloud & DevOps Security:

• Partner with DevOps teams to secure cloud-native infrastructure and Infrastructure as Code (IaC).
• Support the implementation of security controls in cloud environments (e.g., AWS).
• Work closely with Architecture teams to contribute to the design and review of secure deployment architectures.

Vulnerability & Threat Management:

• Operate and maintain vulnerability management tooling.
• Monitor, triage, and track remediation of vulnerabilities across applications and infrastructure.
• Provide reporting and metrics to support risk-based decision-making.

Security Testing & Assurance:

• Coordinate penetration testing engagements with third-party providers.
• Track findings and work with teams to ensure timely remediation.
• Support internal security assessments and red team exercises.

Collaboration:

• Work closely with other security teams and departments to ensure a cohesive approach to cybersecurity.
• Provide guidance and support to other teams on security-related matters.
• Participate in cross-functional projects to enhance the company's security posture.
• Communicate findings and recommendations to stakeholders in a clear and concise manner.

Qualifications & Skills (Examples)

• Proven experience in application or cloud security engineering roles
• Relevant certifications such as OSCP or similar.

Technical Skills:

• Strong understanding of secure software development practices
• Hands on experience of SAST/SCA/Vulnerability Management tools
• Strong understanding and familiarity of Cloud platforms

Analytical Skills: Excellent analytical skills with the ability to identify and address complex security issues.

Communication: Strong communication skills to effectively convey findings and recommendations to stakeholders.

Problem-Solving: Ability to think critically and solve complex security problems.

We understand not everyone will meet 100% of the requirements, however we encourage you to apply if you think your skills are a good fit for this role.

This job vacancy may close earlier than the advertised date if a suitable candidate is found. We encourage interested applicants to submit their applications as soon as possible.

Benefits

• Generous Holiday Entitlement: 30 days of annual leave plus bank holidays, with the option to buy or sell 5 days.
• Health & Wellbeing: Company-paid Private Medical Insurance, Life Insurance, and Health Screening.
• Company Pension Contribution: A matched pension contribution of up to 15% of your base pay.
• Cash Allowance: Flexible allowance to spend on additional benefits personal to you, including: dental cover, paid sabbatical leave, gym membership, menopause support.
• Bonus Opportunity: Dependent on individual/company performance (eligible after 3 months' service)
• Financial Advice: Access to free financial advice to help secure your financial future.

To find out more, please visit https://www.spw.com/careers-at-spw/rewards-and-benefits

Flexible Working

We support flexible working: At SPW, we know how important it is to be able to achieve a balance. We want to support your lifestyle as well as meeting our business needs, so will always aim to be flexible. As well as traditional working patterns, we have colleagues who work informal flexible hours, reduced working hours, and have job-sharing arrangements. Many colleagues work from home, or in a hybrid way.

Ready to restart your career?

We warmly welcome applications from those returning to work after a period of leave, providing appropriate support and training where required.

You belong here

At SPW, we embrace individuality and diversity of identity, experience, and thought. We actively strive for inclusive behaviours and actions, making appropriate adjustments for disabilities, health conditions and neurodiversities. We ensure equal opportunities for all and transparently report on gender pay to promote fairness.

Schroders Personal Wealth operates under the Senior Managers and Certification Regime as a solo-regulated firm and if this role is classed as a Certified Role under that regime you will be subject to enhanced vetting and will have a number of additional conduct and regulatory duties to adhere to, as well as certifying at least annually that you are fit and proper to perform this role.