Application Security Engineer: AI & Cloud Security

Oliver James Group; Manchester; On-site; GBP 36,000 - 60,000; Part time

Job summary

Oliver James Group is seeking an Application Security Engineer in Manchester, working on-site three days per week. You will shield software applications from cyber threats by embedding security across the development lifecycle and collaborating with development and security teams.

Responsibilities include AI-specific security testing, SAST/DAST, vulnerability remediation, and risk assessments, with a strong emphasis on staying ahead of emerging threats and ensuring secure coding practices across

Qualifications

• 1+ year in an Application/Security Engineer role.
• Experience with OWASP Top 10, SAST/DAST, CI/CD pipelines (Azure DevOps or GitHub).
• Strong communication and collaboration with cross-functional teams.

Responsibilities

• Define and implement security testing strategies for AI solutions using grey box and black box methods.
• Conduct SAST, dependency scanning, secrets scanning, and configuration reviews.
• Perform DAST, API fuzzing, authentication testing, and rate-limit testing.
• Execute AI-specific security tests for prompt injection, jailbreaking resistance, and leakage checks.
• Assess risks of new/existing applications and identify vulnerabilities and gaps.
• Interpret findings and verify fixes in code before production deployment.
• Collaborate with data engineering teams to enforce secure coding practices.
• Stay updated on threats and trends to improve risk assessments.
• Provide guidance for incident response related to application security.
• Conduct quarterly application security reviews and maintain incident records.

Job description

Oliver James Group is seeking an Application Security Engineer in Manchester, working on-site three days per week. You will shield software applications from cyber threats by embedding security across the development lifecycle and collaborating with development and security teams.

Responsibilities include AI-specific security testing, SAST/DAST, vulnerability remediation, and risk assessments, with a strong emphasis on staying ahead of emerging threats and ensuring secure coding practices across