Application Security Engineer: Cloud, API & WAF Focus

Queen Square Recruitment; Coventry; Hybrid; GBP 55,000 - 85,000; Full time

Job summary

Queen Square Recruitment is seeking an Application Security Engineer to join a large-scale enterprise security programme in Coventry. You will work across Azure and AWS WAFs, strengthening API security, authentication, and access management across cloud-native services.

You will embed security controls into CI/CD pipelines and contribute to AI security governance, risk and compliance across AI-enabled platforms.

Qualifications

• Experience in application, cloud or cybersecurity engineering.
• Strong knowledge of OWASP Top 10 and web app security.
• Hands-on WAF experience (Azure WAF and/or AWS WAF).
• Secrets management and CI/CD/DevSecOps exposure.
• Nice to have: AZ-500, SC-100, CISSP.

Responsibilities

• Administer and optimise Azure WAF and AWS WAF policies and controls.
• Run application security assessments across web apps, APIs and cloud native services.
• Strengthen API security, authentication and access management practices.
• Support secrets and key management (Azure Key Vault, AWS KMS).
• Embed security controls into CI/CD pipelines and DevSecOps processes.
• Support AI security governance, risk and compliance activity across AI enabled platforms.

Skills

App security

OWASP Top 10

DevSecOps

CI/CD security

Cloud security

Tools

Azure WAF

AWS WAF

Azure Key Vault

AWS KMS

Job description

Queen Square Recruitment is seeking an Application Security Engineer to join a large-scale enterprise security programme in Coventry. You will work across Azure and AWS WAFs, strengthening API security, authentication, and access management across cloud-native services.

You will embed security controls into CI/CD pipelines and contribute to AI security governance, risk and compliance across AI-enabled platforms.