Application Security Engineer - CI/CD & SDLC

Allwynuk; Watford; On-site; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Company Bonus Scheme

Matched pension contributions up to 8.

26 days annual leave + 2 Life Days

Single Private Health Cover

Private Medical

Income Protection

Flexible Benefits – EV Scheme, Will, D

Job summary

Allwyn UK is hiring an Application Security Engineer to ensure security of software applications through rigorous testing and validation across the SDLC. You will embed proactive security testing in development, identify vulnerabilities, and support remediation with dev teams.

You’ll integrate SAST/DAST/MAST/IAST tools in CI/CD, shape threat models, and deliver clear security reports to stakeholders. Collaboration and continuous learning are essential in this role.

Qualifications

• 3–5+ years of hands-on application security testing experience.
• Strong knowledge of SAST, DAST, MAST, and IAST tools and methods.
• Familiarity with secure SDLC and DevSecOps practices.
• Experience integrating application security testing into CI/CD pipelines.
• Good understanding of OWASP Top 10, ASVS, MASVS.
• Proficiency in at least one programming or scripting language (Python/JavaScript/C#).
• Strong analytical, problem-solving, and communication skills.
• Experience producing clear security reports and documentation.

Responsibilities

• Collaborate with development teams to create and maintain application threat models (STRIDE, DREAD).
• Identify and document application risks; propose countermeasures.
• Integrate application vulnerability scanning tools within CI/CD pipelines.
• Interpret vulnerability reports and prioritize remediation by risk.
• Promote awareness of common vulnerabilities and mitigation strategies (OWASP Top 10, ASVS, MASVS).
• Support teams in secure coding practices, including static analysis and code reviews.
• Plan, execute, and manage SAST, DAST, MAST, IAST testing.
• Embed security testing into CI/CD for automated validation.
• Simulate real-world attack scenarios to find weaknesses.
• Develop scripts and tooling to automate security testing.
• Produce actionable security reports for technical and non-technical audiences.
• Maintain testing methodologies and remediation guidance.

Skills

Application security testing

SAST/DAST/MAST/IAST

CI/CD security integration

Secure SDLC / DevSecOps

OWASP Top 10 / MASVS / ASVS

Python / JavaScript / C#

communication & documentation

Education

Bachelor’s degree in Software Engineering

CREST Web Application Tester (nice to have)

Tools

SonarCloud

Snyk

OWASP ZAP

Burp Suite

Tenable WAS

Job description

Allwyn UK is hiring an Application Security Engineer to ensure security of software applications through rigorous testing and validation across the SDLC. You will embed proactive security testing in development, identify vulnerabilities, and support remediation with dev teams.

You’ll integrate SAST/DAST/MAST/IAST tools in CI/CD, shape threat models, and deliver clear security reports to stakeholders. Collaboration and continuous learning are essential in this role.