Application Security Engineer - 12-Month Contract

Spencer Rose Ltd; Easter Howgate; On-site; GBP 77,000 - 94,000; Full time

Job summary

Spencer Rose Ltd is seeking an experienced Application Security Engineer to join our Security Engineering team on a 12-month fixed-term contract in Edinburgh. You will work hands-on with software engineers, architects and product leaders to embed security into products and delivery from the outset.

You will lead threat modelling, security design reviews and provide pragmatic guidance on secure architecture, secure coding and cloud security controls across applications, APIs and CI/CD.

Qualifications

• Extensive experience in application security across products and services.
• Ability to lead threat modelling and security design reviews.
• Hands-on guidance on secure coding, architecture and security controls.

Responsibilities

• Partner with engineering and product teams to understand systems and security needs.
• Lead threat modelling activities and security design reviews.
• Provide guidance on secure architecture and coding practices.
• Support Secure by Design principles across SDLC.
• Embed security tooling and automated controls in CI/CD pipelines.
• Assess vulnerabilities and coordinate remediation plans.

Skills

Application Security

Threat Modelling

SSDLC

DevSecOps

Security Architecture

Tools

Java

Spring Boot

React

Kubernetes

AWS

Azure

Job description

Spencer Rose Ltd is seeking an experienced Application Security Engineer to join our Security Engineering team on a 12-month fixed-term contract in Edinburgh. You will work hands-on with software engineers, architects and product leaders to embed security into products and delivery from the outset.

You will lead threat modelling, security design reviews and provide pragmatic guidance on secure architecture, secure coding and cloud security controls across applications, APIs and CI/CD.