Application Security Engineer (Cyber) - Secure SDLC Lead

Source Technology Limited; Greater London; Hybrid; GBP 90,000 - 120,000; Part time

Job summary

Source Technology Limited is seeking an Application Security Engineer (Cyber) for a London-based hybrid role within the Financial Services sector. You will define secure SDLC practices across projects, working with developers to produce secure code in tight timeframes and leading AppSec initiatives.

You will apply deep knowledge of OWASP, data protection, access management, and threat modelling, collaborating with product teams to triage findings and mitigate risks while driving security

Qualifications

• Degree in Computer Science or Cyber Security.
• Application development background.
• Azure DevOps experience.
• Experience using AI models for security evaluation.
• Knowledge of OWASP Top 10 for AI-enabled security.
• Ability to code in Python/JavaScript/C#/PowerShell.
• Experience in Financial Services is an advantage.
• Excellent analytical skills with attention to detail.
• CISSP/CSSLP/CEH/OSCP or similar certification.
• Presentation skills and ability to communicate to non-technical audiences.
• Team-player interpersonal skills and collaboration.

Responsibilities

• Design, maintain and build product security tools and services with software/security engineers.
• Technical point of contact for automation, CI/CD, and AppSec operations.
• Use AI models to assess application code for weaknesses and vulnerabilities.
• Build tools and scripts enabling developers to consume security services.
• Explain findings from penetration testing to engineers and guide mitigations.
• Improve SAST, DAST, IaC and WAF/IDS tooling and coverage in cloud environments.

Skills

Azure DevOps

Python

JavaScript

C#

PowerShell

AI security models

GitHub Copilot

Security leadership

CISSP

English proficiency

Education

Computer Science / Cyber Security Degree

Tools

GitHub Copilot

Job description

Source Technology Limited is seeking an Application Security Engineer (Cyber) for a London-based hybrid role within the Financial Services sector. You will define secure SDLC practices across projects, working with developers to produce secure code in tight timeframes and leading AppSec initiatives.

You will apply deep knowledge of OWASP, data protection, access management, and threat modelling, collaborating with product teams to triage findings and mitigate risks while driving security