Application Security Specialist

Experis UK; Greater London; Hybrid; GBP 70,000 - 120,000; Full time

Benefits offered by this job

Car allowance

Hybrid working

Annual bonus

Benefits package

Training and certifications

Job summary

Experis UK in London is seeking an experienced Application Security professional to shape secure software across a large enterprise. You will lead reviews for high-risk products, implement SDLC security practices and drive DevSecOps across teams.

The role covers threat modelling, vulnerability management and secure AI development, with opportunities to mentor developers and deliver hands-on training. A competitive package includes bonus and car allowance in a hybrid London setup.

Qualifications

• 3–5 years in application security or secure development roles.
• Hands-on security reviews and assessments experience.
• Strong knowledge of secure coding practices.
• Experience with SAST, DAST and SCA tools.
• CI/CD security integration experience.
• Understanding of OWASP Top 10 and vulnerabilities.
• Reading code in Java, C, C++, C#, Python.
• Shift-left security and SDLC practices.

Responsibilities

• Lead application security reviews for high-risk products.
• Perform architecture, design and code security reviews.
• Translate findings into remediation plans for dev teams.
• Embed security across SDLC and DevSecOps practices.
• Mentor teams and deliver security training.
• Monitor threats and vulnerability trends.

Skills

Application security

Secure SDLC

CI/CD security

OWASP Top 10

SAST & DAST

API security

Threat modelling

Education

Degree in Computer Science

Cyber Security

Software Engineering

Tools

SAST tools

DAST tools

SCA tools

CI/CD tooling

Job description

Shape the Future of Secure Software Development Across a Leading Enterprise Organisation

Competitive Salary + Bonus + Car Allowance + Benefits | London | Hybrid Working

Join a growing Cyber, Risk & Security team and play a pivotal role in strengthening the security of products, platforms and services delivered across a complex European technology environment.

Key Responsibilities

Application Security & Assurance

• Lead application security reviews for high-risk products and services.
• Conduct and oversee SAST, DAST, fuzz testing and API security assessments.
• Perform architecture, design and code security reviews.
• Assess applications against OWASP Top 10 and other industry standards.
• Translate findings into practical remediation plans and developer guidance.

Secure Development & DevSecOps

• Support the development of secure coding standards across technologies including Java, C and C++.
• Embed security throughout the Software Development Lifecycle (SDLC).
• Design and support secure CI/CD pipeline patterns.
• Integrate SAST, DAST, SCA and security tooling into development workflows.
• Support automation of security controls and assurance activities.

Security Leadership & Developer Enablement

• Act as a subject matter expert for Application Security across the organisation.
• Deliver secure coding training, workshops and awareness sessions.
• Mentor development teams and promote security-first engineering practices.
• Drive adoption of secure development standards and methodologies.

Threat & Vulnerability Management

• Support application vulnerability management activities.
• Assist development teams with vulnerability triage and remediation planning.
• Identify recurring weaknesses and opportunities for continuous improvement.
• Monitor emerging threats, vulnerabilities and industry trends.

Secure AI Development

• Support the adoption of secure development practices for AI-enabled applications.
• Assist with controls relating to AI model security, data handling and misuse risks.
• Help development teams securely adopt emerging technologies.

Essential Experience

• 3-5 years' experience within Application Security, Secure Development, or Software Engineering with a security focus.
• Hands-on experience conducting application security reviews and assessments.
• Strong knowledge of application security principles and secure coding practices.
• Experience working with SAST, DAST and Software Composition Analysis (SCA) tools.
• Experience integrating security controls into CI/CD pipelines.
• Strong understanding of OWASP Top 10 and common vulnerability classes.
• Experience with API and web application security.
• Knowledge of threat modelling techniques and methodologies.
• Experience working closely with software engineering teams in enterprise environments.
• Ability to read and understand code in languages such as Java, C, C++, C#, Python or similar.
• Strong understanding of shift-left security and secure development lifecycle practices.

Highly Desirable Skills

• Fuzz testing and advanced dynamic testing techniques.
• Manual code review experience.
• DevSecOps implementation and security automation.
• Experience integrating SAST, DAST, SCA and secrets scanning tools.
• Cloud-native, microservices and serverless architecture security.
• Secure AI and data-driven application security.
• OWASP SAMM, ASVS or other security maturity frameworks.
• Experience building or supporting a Security Centre of Excellence.
• Experience working within multinational or multi-entity organisations.
• Delivery of developer-focused security training and workshops.

Qualifications

Essential

• Degree or equivalent professional experience in:
• Computer Science
• Software Engineering
• Cyber Security
• Information Security
• Or a related technical discipline.
• Formal training, certification or demonstrable experience within Secure Development or Application Security.

Desirable

• CSSLP (Certified Secure Software Lifecycle Professional).
• GWAPT or GWEB.
• OSCP or equivalent Offensive Security certifications.
• Microsoft Azure Security Engineer Associate.
• AWS Security Specialty.
• Google Professional Cloud Security Engineer.
• DevSecOps or CI/CD related certifications.
• ISO 27001 certifications.
• NIST CSF and NIST SSDF knowledge.

Package & Benefits

• Competitive salary
• Annual bonus
• Car allowance
• Hybrid working
• Comprehensive benefits package
• Ongoing training and professional development
• Industry-recognised certification support
• Exposure to enterprise-scale application security programmes
• Opportunity to work with modern cloud, DevSecOps and AI technologies
• Clear career progression within a growing cyber security function

If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.