AppSec Engineer: Build Secure Systems & Tooling

Greenhouse Software, Inc.; Greater London; Hybrid; GBP 70,000 - 100,000; Full time

Job summary

Rightmove is hiring an Application Security Engineer to join the expanding AppSec function. You will partner with engineering teams to deliver security tooling, manage vulnerability workflows, and shape secure design practices across services.

Responsibilities include triage of findings, threat modelling, and maintaining runbooks, with a cloud-security focus using Prisma Cloud. The role involves collaboration with multiple squads and stakeholders to advance security maturity.

Qualifications

• Practical experience in application security or security engineering.
• Ability to assess findings and make pragmatic recommendations to engineering teams.
• Working proficiency in Python (read, modify, and write scripts).
• Experience with SAST/DAST/SCA/secrets scanning tools.
• Experience with Prisma Cloud or a comparable cloud-native security platform.
• Familiar with reading code and CI/CD pipelines (GitLab CI or equivalent).
• Experience leading threat modelling exercises and engaging with engineers.

Responsibilities

• Triage and classify security findings across repositories; drive remediation.
• Manage day-to-day vulnerability management, findings triage and engagement.
• Roll out and operate application security tooling across engineering repos.
• Develop and maintain engineer-facing guidance for resolving vulnerabilities.
• Support cloud security posture management through Prisma Cloud and related teams.
• Facilitate threat modelling sessions and improve practices across squads.

Skills

Vulnerability management

Python

Threat modelling

CI/CD pipelines

Security engineering

Tools

Snyk

Semgrep

Aikido

Checkmarx

Prisma Cloud

GitLab CI

Job description

Rightmove is hiring an Application Security Engineer to join the expanding AppSec function. You will partner with engineering teams to deliver security tooling, manage vulnerability workflows, and shape secure design practices across services.

Responsibilities include triage of findings, threat modelling, and maintaining runbooks, with a cloud-security focus using Prisma Cloud. The role involves collaboration with multiple squads and stakeholders to advance security maturity.