Application Security Engineer - Lead Secure SDLC & AI Security

Just Eat Takeaway.com; Loughton; On-site; GBP 90,000 - 120,000; Full time

Job summary

Just Eat Takeaway.com is seeking an Application Security Engineer to join our security team and protect our global platform. You will work with Technology teams to ensure security controls are applied throughout the SDLC and act as SME for partners across languages and tools.

You will consult on time-sensitive features, perform threat modelling, conduct design and code reviews, and educate developers to raise security awareness. This role emphasizes collaboration and impact.

Qualifications

• Experience defining controls for complex environments independent of the underlying platform or technology.
• Deep knowledge of OWASP Top 10 and how to design appropriate security controls.
• Experience with Secure Coding Tools (SCA, SAST & Secrets).
• Experience identifying vulnerabilities throughout SDLC with defensive and offensive mindset.
• Experience securing AI-enabled applications and assessing AI/LLM vulnerabilities.
• Strong communication skills and proven stakeholder management.

Responsibilities

• Translate security principles into requirements and controls across Just Eat Takeaway.com's platforms.
• Lead security reviews including threat modelling, design reviews, consultation and code reviews.
• Assess vulnerabilities in AI-enabled apps and leverage AI tools to improve security analysis.
• Be a leading voice championing security with developers in technical and non-technical terms.
• Work collaboratively with stakeholders or independently.

Skills

Define security controls

OWASP Top 10

Secure coding tools

Vulnerability management

AI security

Stakeholder management

Engineer coaching

Tools

SCA

SAST

Secrets management

Job description

Just Eat Takeaway.com is seeking an Application Security Engineer to join our security team and protect our global platform. You will work with Technology teams to ensure security controls are applied throughout the SDLC and act as SME for partners across languages and tools.

You will consult on time-sensitive features, perform threat modelling, conduct design and code reviews, and educate developers to raise security awareness. This role emphasizes collaboration and impact.