Application Security Engineer - Empower Secure DevOps for Products

Aboutus Ft; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Generous annual leave

Medical cover

Parental leave

Gym membership assistance

Hybrid/onsite work

Job summary

The Financial Times is looking for a Cyber Security Engineer to strengthen application security across our cloud-native estate. This hands-on role focuses on enabling secure engineering for product, platform and software teams, with practical security guardrails in CI/CD pipelines and repositories.

You’ll work with engineers to triage vulnerabilities, develop threat models, and promote secure coding practices.

Qualifications

• Practical experience in application security within modern engineering environments.
• Experience explaining and remediating security issues to software engineers.
• Familiarity with common web application security risks and secure coding practices.
• Experience with vulnerability triage, prioritisation and remediation tracking.
• Experience using or interpreting findings from tools such as SAST, software composition analysis, secret scanning or similar.
• Experience participating in or supporting threat‑modelling activities.
• Ability to write scripts or small tools, ideally in Python, to automate tasks or improve visibility.
• Strong communication and collaboration skills.
• Familiarity with Agile or Scrum ways of working.

Responsibilities

• Apply security guardrails across CI/CD pipelines and GitHub repositories.
• Collaborate with product and engineering teams to remediate vulnerabilities.
• Perform threat modelling for applications and support secure design.
• Create automation scripts to reduce manual security tasks.
• Guide teams on secure development practices and tooling.

Skills

Application security experience

Developer-friendly security mindset

Vulnerability management experience

CI/CD and code security awareness

Threat modelling awareness

Automation mindset

Cloud security awareness

Growth mindset

Strong communication and collaboration

Agile/Scrum familiarity

Tools

SAST

Software composition analysis

Secret scanning

Terraform

CloudFormation

Splunk

Job description

The Financial Times is looking for a Cyber Security Engineer to strengthen application security across our cloud-native estate. This hands-on role focuses on enabling secure engineering for product, platform and software teams, with practical security guardrails in CI/CD pipelines and repositories.

You’ll work with engineers to triage vulnerabilities, develop threat models, and promote secure coding practices.