Application Security Engineer: SDLC Guardian & Threat Modeler

Just Eat Takeaway.com; St Albans; On-site; GBP 90,000 - 120,000; Full time

Job summary

Just Eat Takeaway.com seeks an Application Security Engineer to partner with global tech teams and embed security across the SDLC, from design through deployment.

You will lead security reviews, threat modeling, and provide guidance to developers, including securing AI-enabled features, while educating teams on best practices. This role emphasizes collaboration and strong communication across stakeholders.

Qualifications

• Experience defining security controls for complex environments across diverse platforms.
• In-depth knowledge of OWASP Top 10 and how to design appropriate security controls.
• Experience with Secure Coding Tools (SCA, SAST & Secrets).
• Ability to identify and address vulnerabilities throughout the SDLC, balancing defensive and offensive mindsets.
• Experience securing AI-enabled applications and assessing AI/LLM vulnerabilities.
• Excellent communication skills and proven stakeholder management experience.
• A passion for guiding and developing engineers on best practices.
• A commitment to continuous learning and improving security knowledge.

Responsibilities

• Translate security principles into actionable requirements and controls across Just Eat Takeaway.com's platforms.
• Lead security reviews of varying scale, including threat modeling, design reviews, and code reviews to enhance application security.
• Assess vulnerabilities in AI-enabled applications and leverage AI tools to improve security analysis and developer enablement.
• Champion security with developers, communicating effectively in technical and non-technical terms.
• Collaborate with key stakeholders while also working independently.

Skills

Threat modeling

OWASP Top 10

Security reviews

Secure coding

AI security

Stakeholder mgmt

Communication

Engineer coaching

Tools

SCA

SAST

Secrets mgmt

Job description

Just Eat Takeaway.com seeks an Application Security Engineer to partner with global tech teams and embed security across the SDLC, from design through deployment.

You will lead security reviews, threat modeling, and provide guidance to developers, including securing AI-enabled features, while educating teams on best practices. This role emphasizes collaboration and strong communication across stakeholders.