Application Security Engineer — Hybrid, Tooling & Threat Modelling

Rightmove Careers; Greater London; Hybrid; GBP 90.000 - 120.000; Vollzeit

Benefits dieser Stelle

Hybrid working with minimum 2 days in-

Private Medical Insurance

Pension and Life Insurance

27 days holiday + volunteering days

Life assurance 4x salary

Zusammenfassung

Rightmove is seeking an Application Security Engineer to join the growing AppSec function. You’ll partner with engineering teams to deliver day-to-day security tooling, vulnerability management, secure design and threat modelling across services.

You’ll triage findings, support cloud security posture with Prisma Cloud, conduct secure design reviews, and help mature our AppSec practices while working in a hybrid model with a minimum two days in the office.

Qualifikationen

• Practical experience in application security, security engineering or a related hands-on security role.
• Able to assess security findings in context, distinguish meaningful risk from tooling noise, and make pragmatic recommendations to engineering teams.
• Working proficiency in Python (able to read, modify, and write scripts used for internal tooling).
• Practical experience with DAST/SAST/SCA/secrets scanning tools (Aikido, Snyk, Semgrep,Checkmarx, or similar).
• Experience with Prisma Cloud or a comparable cloud-native security platform.
• Comfortable reading code and understanding CI/CD pipelines (GitLab CI or equivalent).
• Experience running or contributing to threat modelling exercises.
• Comfortable running recurring stakeholder syncs with engineering teams.
• Strong written communication.
• Able to triage and prioritise a high volume of inbound requests independently.

Aufgaben

• Vulnerability Management & Security Tooling.
• Support the rollout and operation of application security tooling across engineering repositories, including SAST, SCA and secrets detection.
• Triage and classify security findings across repos, driving remediation of the secrets backlog.
• Manage the day-to-day operation of vulnerability management, including findings triage, monitoring and engineering engagement.
• Maintain engineer-facing guidance for resolving vulnerabilities and requesting exceptions.

Kenntnisse

Application Security

Python

SAST/DAST/SCA

Prisma Cloud

CI/CD Pipelines

Threat Modelling

Stakeholder Engagement

Written Communication

Vulnerability Triage

Tools

Aikido

Snyk

Semgrep

Checkmarx

Prisma Cloud

GitLab CI

Jobbeschreibung

Rightmove is seeking an Application Security Engineer to join the growing AppSec function. You’ll partner with engineering teams to deliver day-to-day security tooling, vulnerability management, secure design and threat modelling across services.

You’ll triage findings, support cloud security posture with Prisma Cloud, conduct secure design reviews, and help mature our AppSec practices while working in a hybrid model with a minimum two days in the office.