Application Security Specialist

Experis IT

Greater London

Hybrid

GBP 90,000 - 120,000

Full time

8 days ago

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Benefits offered by this job

Hybrid working

Competitive salary

Annual bonus

Car allowance

Benefits

Job summary

Experis IT in London is seeking an Application Security Specialist to strengthen security across our enterprise software, partnering with engineering teams to embed security throughout the Software Development Life Cycle. You will drive a security-first culture within a complex European technology environment.

You will lead application security reviews, drive SAST/DAST/SCA, and help shape secure development standards while enabling DevSecOps across teams.

Qualifications

3-5 years' experience in Application Security, Secure Development, or Software Engineering with a security focus.
Hands-on experience conducting application security reviews and assessments.
Strong knowledge of application security principles and secure coding practices.
Experience with SAST, DAST and SCA tools.
Experience integrating security controls into CI/CD pipelines.
Strong understanding of OWASP Top 10 and common vulnerability classes.
Experience with API and web application security.
Knowledge of threat modelling techniques.

Responsibilities

Lead application security reviews for high-risk products and services.
Conduct and oversee SAST, DAST, fuzz testing and API security assessments.
Perform architecture, design and code security reviews.
Assess applications against OWASP Top 10 and other industry standards.
Translate findings into practical remediation plans and developer guidance.

Skills

Application security

Secure SDLC

CI/CD security

SAST/DAST/SCA

OWASP Top 10

API security

Threat modelling

Code comprehension: Java/C/C++/C#/Py

Cloud security

Education

Degree in Computer Science / Software Engineering / Cyber Security / Information Security

Tools

SAST tools

DAST tools

SCA tools

CI/CD tooling

Job description

Application Security Specialist

Shape the Future of Secure Software Development Across a Leading Enterprise Organisation Competitive Salary + Bonus + Car Allowance + Benefits | London | Hybrid Working

Join a growing Cyber, Risk & Security team and play a pivotal role in strengthening the security of products, platforms and services delivered across a complex European technology environment. As an Application Security Specialist, you'll be a key member of the Secure Development Centre of Excellence (CoE), partnering with engineering teams to embed security throughout the software development life cycle. You'll drive a security-first culture, influence development standards, and help deliver secure, resilient applications for both internal and customer-facing solutions.

Key Responsibilities:

Lead application security reviews for high-risk products and services.
Conduct and oversee SAST, DAST, fuzz testing and API security assessments.
Perform architecture, design and code security reviews.
Assess applications against OWASP Top 10 and other industry standards.
Translate findings into practical remediation plans and developer guidance.

Secure Development & DevSecOps

Support the development of secure coding standards across technologies including Java, C and C++.
Embed security throughout the Software Development Lifecycle (SDLC).
Design and support secure CI/CD pipeline patterns.
Integrate SAST, DAST, SCA and security tooling into development workflows.
Support automation of security controls and assurance activities.

Security Leadership & Developer Enablement

Act as a subject matter expert for Application Security across the organisation.
Deliver secure coding training, workshops and awareness sessions.
Mentor development teams and promote security-first engineering practices.
Drive adoption of secure development standards and methodologies.

Threat & Vulnerability Management

Support application vulnerability management activities.
Assist development teams with vulnerability triage and remediation planning.
Identify recurring weaknesses and opportunities for continuous improvement.
Monitor emerging threats, vulnerabilities and industry trends.

Secure AI Development

Support the adoption of secure development practices for AI-enabled applications.
Assist with controls relating to AI model security, data handling and misuse risks.
Help development teams securely adopt emerging technologies.

Essential Experience:

3-5 years' experience within Application Security, Secure Development, or Software Engineering with a security focus.
Hands‑on experience conducting application security reviews and assessments.
Strong knowledge of application security principles and secure coding practices.
Experience working with SAST, DAST and Software Composition Analysis (SCA) tools.
Experience integrating security controls into CI/CD pipelines.
Strong understanding of OWASP Top 10 and common vulnerability classes.
Experience with API and web application security.
Knowledge of threat modelling techniques and methodologies.
Experience working closely with software engineering teams in enterprise environments.
Ability to read and understand code in languages such as Java, C, C++, C#, Python or similar.
Strong understanding of shift‑left security and secure development life cycle practices.

Highly Desirable Skills:

Fuzz testing and advanced dynamic testing techniques.
Manual code review experience.
DevSecOps implementation and security automation.
Experience integrating SAST, DAST, SCA and secrets scanning tools.
Cloud‑native, microservices and serverless architecture security.
Secure AI and data‑driven application security.
OWASP SAMM, ASVS or other security maturity frameworks.
Experience building or supporting a Security Centre of Excellence.
Experience working within multinational or multi‑entity organisations.
Delivery of developer‑focused security training and workshops.

Qualifications:

Essential

Degree or equivalent professional experience in:
- Computer Science
- Software Engineering
- Cyber Security
- Information Security
- Or a related technical discipline.
Formal training, certification or demonstrable experience within Secure Development or Application Security.

Desirable