Application Security Engineer (Software) - Financial Services

Source Group International; Greater London; Hybrid; GBP 70,000 - 110,000; Part time

Job summary

Source Group International in London is seeking an experienced Application Security Engineer (Software) for a hybrid role, combining security engineering with software development. You will collaborate with a Tier 1 bank to implement secure coding practices across the SDLC.

The role requires deep OWASP knowledge, threat modelling, cloud security in Azure/AWS, and hands-on coding in Python/JavaScript/C#/PowerShell with strong collaboration across development teams.

Qualifications

• Application Development background.
• Experience in Application or Product Security.
• Experience using AI models for security evaluation.
• Proficient in Python/JS/C#/PowerShell.
• Experience in large organisations or Financial Services is an advantage.

Responsibilities

• Design, maintain and build product security tools and services.
• Act as technical point of contact for CI/CD and product security operations.
• Use AI models and cyber harnesses to assess code for weaknesses.
• Build tools and automation scripts for secure coding.
• QA and testing of security products.
• Explain penetration findings to development teams and mitigate risks.
• Explain business risk when assessing vulnerabilities.
• Improve SAST, DAST, IaC security tools and WAF/IDS coverage.
• Improve security tooling in cloud environments (Azure & AWS).

Skills

Application security experience

Software development background

Programming (Python/JavaScript/CSharp/

Threat modelling & security testing

Team collaboration & communication

Education

Computer Science / Cyber Security Degree

CISSP / CSSLP / CEH / OSCP or similar certification

Tools

GitHub Copilot

Codex

OWASP Top 10

Job description

Application Security Engineer (Software) - Financial Services
Contract - Inside I35
London - Hybrid (3 Days in Office)

Job Description

Oour clients a global Tier 1 investment bank are looking for an experienced Application Security Engineer who has prior experinece in Software Engineering and is familiar with the Software Development Lifecycle practices.

What you'll do

In this position, you are a passionate and talented application security engineer with very deep understanding of OWASP, CWE 25, Data Protection, Access management, software vulnerabilities, best practices design and threat modelling skills, who can work in a dynamic environment. You must be dedicated to able to work with developers in producing secure code in short time frames and be willing to go beyond the standard routine.

Your primary responsibilities includes:

• Work as part of a team of software and security engineers to design/maintain and build best-in-class product security tools and services.
• Technical point of contact for product teams as it relates to automation, CI/CD, and Product Application Security Operations
• Using approved AI models and cyber harnesses to assess application code for business logic weaknesses, misconfiguration and vulnerabilities.
• Build tools and automation scripts that enable developers to easily consume security services delivered by Security Engineering and Automation team
• Responsible for security product QA and Testing
• Build strong relationships with product development teams
• Run software composition analysis (SCA) tools
• To understand and explain penetration testing findings to the software engineering teams helping them to triage the findings and explaining how to mitigate the risks
• To articulate business risk when assessing software vulnerabilities
• Continuously improve the operations of SAST, DAST and IaC security tools
• Continuously improve the operations of Web Application Firewalls (WAF) or IDS
• Continuously improve the coverage of security tooling in Cloud environments e.g. Microsoft Azure & Amazon AWS

The knowledge, experience and qualifications you need

• Application Development background
• Experience in Application or Product Security
• Prior experience in using AI models and cyber harnesses to support security evaluation of application and software code.
• GitHub, Copilot, Codex, OWASP Top 10 for Agentic AI, AI skills development and security triage.
• Ability to code in at least one programming language e.g. Python/JavaScript/CSharp/Powershell
• Prior experience working in a large organisation or Financial Services is an advantage as well as in Software Engineering
• Excellent analytical skills with attention to details
• CISSP/CSSLP/CEH/OSCP or similar certification
• Team-player interpersonal skills, with the ability to communicate and collaborate effectively with different people in a variety of roles
• Passionate about developing a career in Information Security
• Computer Science / Cyber Security Degree
• Excellent command of the English language, both written and spoken

What you'll be like

• Passionate about mastering and innovating best practice in business analysis
• Inspiring and collaborative leader, model of agile leadership approach
• Friendly, approachable, enjoys working with people from a variety of backgrounds
• Capable of remaining positive when under pressure
• Continuous improvement mind-set, challenges the status quo and seeks self improvement
• Problem solver, comfortable taking the initiative in challenging and ambiguous circumstances

We believe in equal opportunity for all and actively encourage applications from diverse backgrounds, experiences, and perspectives.