Application Security Engineer

McGregor Boyall; Warwick; Hybrid; GBP 70,000 - 85,000; Full time

Benefits offered by this job

Annual bonus

Comprehensive benefits package

Remote-first working model

Job summary

McGregor Boyall is seeking an experienced Application Security Engineer to embed security across the SDLC and strengthen application security capabilities within a complex enterprise environment.

You will work with Development, DevOps and Platform Engineering to drive secure-by-design principles, implement DevSecOps practices and ensure security controls are integrated throughout modern software delivery pipelines.

Qualifications

• Experience in Application Security, DevSecOps or Security Engineering.
• Strong understanding of secure software development and application security best practice.
• Experience securing CI/CD pipelines.
• Hands-on experience with Checkmarx or similar security testing tools.
• Knowledge of SAST, DAST, SCA and vulnerability management.
• Understanding of cloud-hosted applications, containers and modern architectures.
• Familiarity with OWASP, ISO27001 and NCSC CAF frameworks.
• Strong stakeholder engagement and communication skills.
• Awareness of software supply chain threats, cloud security and emerging AI-related risks.
• Exposure to Prisma Cloud, Cortex or similar platforms would be advantageous.

Responsibilities

• Embed security throughout the SDLC, from design through deployment.
• Promote secure coding, security-by-design and shift-left security principles.
• Integrate and optimise security controls within CI/CD pipelines.
• Manage and enhance SAST, DAST, SCA and IAST capabilities.
• Configure, support and optimise Checkmarx and related application security tooling.
• Improve security testing, vulnerability management and remediation processes.
• Provide application security guidance to development and engineering teams.
• Support cloud-native, containerised and modern application environments.
• Contribute to application security standards, awareness and continuous improvement initiatives.

Skills

Application Security

DevSecOps

Security Engineering

CI/CD security

Security testing tools

Cloud security

OWASP, ISO27001, NCSC CAF

Stakeholder engagement

AI risk awareness

Tools

Checkmarx

Prisma Cloud

Cortex

Job description

Application Security Engineer

£70,000 - £85,000 + Bonus + Excellent Benefits

Remote Working | Midlands Office (approx. 2 days per month)

Candidates must be eligible to obtain SC Clearance

We are seeking an experienced Application Security Engineer to help embed security across the software development lifecycle and strengthen application security capabilities within a complex enterprise environment.

Working closely with Development, DevOps and Platform Engineering teams, you will drive secure-by-design principles, implement DevSecOps practices and ensure security controls are integrated throughout modern software delivery pipelines.

Key Responsibilities

• Embed security throughout the SDLC, from design through to deployment.
• Promote secure coding, security-by-design and shift-left security principles.
• Integrate and optimise security controls within CI/CD pipelines.
• Manage and enhance SAST, DAST, SCA and IAST capabilities.
• Configure, support and optimise Checkmarx and related application security tooling.
• Improve security testing, vulnerability management and remediation processes.
• Provide application security guidance to development and engineering teams.
• Support cloud-native, containerised and modern application environments.
• Contribute to application security standards, awareness and continuous improvement initiatives.

About the Role

This is a senior technical role offering significant autonomy and influence across the organisation's software engineering and cyber security functions. You'll act as a subject matter expert for application security, working closely with Development, Architecture, DevOps and Security teams to improve security maturity and reduce application risk.

Required Skills & Experience

• Experience in Application Security, DevSecOps or Security Engineering.
• Strong understanding of secure software development and application security best practice.
• Experience securing CI/CD pipelines and development environments.
• Hands-on experience with Checkmarx or similar security testing tools.
• Knowledge of SAST, DAST, SCA and vulnerability management.
• Understanding of cloud-hosted applications, containers and modern architectures.
• Familiarity with OWASP, ISO27001 and NCSC CAF frameworks.
• Strong stakeholder engagement and communication skills.
• Awareness of software supply chain threats, cloud security and emerging AI-related risks.
• Exposure to Prisma Cloud, Cortex or similar platforms would be advantageous.

What's on Offer?

• £70,000 - £85,000 salary
• Annual bonus
• Comprehensive benefits package
• Remote-first working model
• Exposure to modern DevSecOps and Application Security technologies
• Opportunity to shape application security practices across a large-scale enterprise environment