Application Security Engineer: Secure Code & AI-Ready SDLC

Travelers Canada; Greater London; Hybrid; GBP 70,000 - 90,000; Full time

Benefits offered by this job

25 days annual leave

Private medical insurance

Life assurance

Job summary

Simply Business is seeking an experienced Application Security Engineer to embed security across the software development lifecycle. You will demystify threats, modernise our DevSecOps practices, and mentor developers to build resilient systems, collaborating closely with engineering teams.

The role requires 5+ years in application security, with hands-on testing, vulnerability tooling, and cloud environment knowledge.

Qualifications

• 5+ years of application security experience with hands-on testing and tooling expertise.
• Strong knowledge of web vulnerabilities, secure coding, and cloud environments (AWS/Azure/GCP).
• Familiar with DevSecOps methodologies and automated security integration.
• Excellent ability to explain complex security concepts to both technical and non-technical colleagues.

Responsibilities

• Provide expert guidance on secure coding, threat modelling, and OWASP Top 10 mitigation.
• Integrate security assessments, code reviews, and penetration testing into the SDLC.
• Evaluate and run modern security tooling (SAST/DAST/IAST) for vulnerability checks.
• Research AI/LLM threats to design proactive defensive architectures and mentor engineers.

Skills

Penetration testing

OWASP Top 10

Cloud security

DevSecOps

Security tooling

Tools

SAST

DAST

IAST

Job description

Simply Business is seeking an experienced Application Security Engineer to embed security across the software development lifecycle. You will demystify threats, modernise our DevSecOps practices, and mentor developers to build resilient systems, collaborating closely with engineering teams.

The role requires 5+ years in application security, with hands-on testing, vulnerability tooling, and cloud environment knowledge.