Application Security Engineer

TyneStack Ltd; Newcastle upon Tyne; Hybrid; GBP 54,000 - 66,000; Full time

Job summary

TyneStack Ltd in Newcastle upon Tyne is seeking an Application Security Engineer to shape security within a large software development environment. This newly created role offers the chance to embed security across the SDLC, work with developers, and influence secure design practices in a Microsoft Azure and .NET estate.

You will build trusted relationships with engineers, implement SAST/DAST/SSCA tooling, integrate security into CI/CD, conduct threat modelling and risk assessments, and help

Qualifications

• Strong commercial experience in application security, DevSecOps, product security or secure software development.
• Experience working directly with developers to identify, explain and remediate application vulnerabilities.
• Practical experience using or implementing application security testing tools (SAST, DAST, SCA).
• Good understanding of secure software development practices and OWASP Top 10.

Responsibilities

• Embed security throughout the software development lifecycle with development teams.
• Provide practical security guidance and enable secure development practices.
• Review and improve security processes, tooling and standards.

Skills

AppSec experience

DevSecOps

Vulnerability remediation

OWASP Top 10

CI/CD security

Azure security

Threat modelling

Influence & stakeholder management

Proactive improvements

Tools

Azure DevOps

SAST/DAST/SCA tools

Job description

Application Security Engineer

Salary: £60,000 per annum

Location: Newcastle upon Tyne

Working arrangement: Hybrid, 3 days office / 2 days home

Employment: Permanent, Full Time

The opportunity

TyneStack Partners is supporting an established financial services and technology business in Newcastle with the appointment of an Application Security Engineer.

This is a newly created position offering the opportunity to help establish and shape application security within a substantial software development environment.

Rather than joining an established application security function and simply maintaining existing processes, you'll have the opportunity to influence how security is embedded into software development, improve existing practices and help build the foundations for long term application security maturity.

The business operates a significant Microsoft Azure and .NET application estate, supported by experienced development teams.

We're looking for someone who combines strong technical application security knowledge with the confidence, communication skills and practical experience to work closely with software engineers.

A key part of this role will be building trusted relationships with developers, understanding how they work and helping them introduce stronger security practices without unnecessarily slowing delivery.

Previous experience as a software developer, or extensive experience working directly alongside development teams, would be particularly valuable.

What you'll be doing

• Work directly with software development teams to embed security throughout the software development lifecycle.
• Build relationships with developers and engineering leaders, providing practical security guidance and helping teams adopt secure development practices.
• Review existing application security processes and identify opportunities to improve security controls, tooling and standards.
• Implement and improve code scanning, including SAST, DAST and software composition analysis.
• Integrate application security tooling and automated checks into CI/CD pipelines.
• Conduct application security assessments, secure design reviews and threat modelling across applications and APIs.
• Identify vulnerabilities, assess risk and work collaboratively with developers to prioritise and implement remediation.
• Develop and improve secure coding standards aligned with OWASP best practices.
• Support security improvements across Microsoft Azure hosted applications, including identity, authentication and secrets management.
• Provide security expertise to development projects, helping teams balance security, business requirements and delivery priorities.
• Contribute to the ongoing development of application security processes, standards and DevSecOps maturity.

What we're looking for

We're particularly interested in people who have already worked closely with software development teams and understand how modern applications are designed, built, tested and deployed.

You’ll ideally bring:

• Strong commercial experience in application security, DevSecOps, product security or secure software development.
• Experience working directly with developers to identify, explain and remediate application vulnerabilities.
• Practical experience using or implementing application security testing tools, including SAST, DAST or SCA.
• Good understanding of secure software development practices and OWASP Top 10.
• Experience with CI/CD pipelines and integrating security controls into development workflows.
• Knowledge of Microsoft Azure and application security within cloud environments.
• Experience with threat modelling, secure design reviews or application risk assessments.
• The confidence to challenge existing practices constructively, influence experienced engineers and build credibility across development teams.
• A proactive approach, with the ability to take ownership and establish improvements in an evolving environment.

Experience with .NET, C#, ASP.NET or API security would be particularly advantageous, given the technology environment.

We would also welcome applications from experienced software developers who have moved into application security or DevSecOps and can demonstrate strong practical security experience.

Additional experience that would be useful

• Azure DevOps and secure CI/CD implementation
• SonarQube, Snyk, OWASP ZAP, Tenable or similar security tools
• Microsoft Entra ID, OAuth2, OpenID Connect and Azure Key Vault
• Software composition analysis and dependency vulnerability management
• Microsoft Defender and Sentinel
• Experience in financial services or regulated environments
• Supporting or mentoring developers on secure coding practices

Why consider this opportunity?

Build something new

This is a newly created position where you'll help establish application security practices rather than simply inherit an existing function.

Have a genuine influence

You’ll work directly with experienced development teams and have the opportunity to shape security standards, tools and processes across the business.

Combine security with software engineering

The role is particularly suited to someone who enjoys understanding how software works and helping developers deliver secure applications.

Work with modern technology

You’ll be involved with a substantial Azure and .NET environment, with opportunities to improve secure development practices, automation and application security tooling.

Develop your career

You’ll join a business investing in the development of its security capabilities, with opportunities to contribute to the long term direction and maturity of the function.