AppSec Engineer: Threat Modelling & Cloud Security

Legal Counsel - 12 month FTC at Rightmove Greenhouse; Greater London; Hybrid; GBP 80,000 - 110,000; Full time

Benefits offered by this job

Private Medical Insurance

Pension

Life Insurance

Hybrid working

Holiday allowance

Job summary

Rightmove is hiring an Application Security Engineer to join the growing AppSec function in London. You will own vulnerability management, security tooling, and threat modelling, working with engineering to secure design and CI/CD pipelines.

Requires hands-on security experience, Python scripting ability, and familiarity with SAST/DAST tools. Hybrid work model with two days in the office is provided, along with a comprehensive benefits package.

Qualifications

• Practical experience in application security, security engineering or a related hands-on security role.
• Able to assess security findings in context and make pragmatic recommendations.
• Python scripting ability to read, modify and write internal tooling.
• Experience with DAST/SAST/SCA/secrets scanning tools (Snyk, Semgrep, Checkmarx, etc.).
• Experience with Prisma Cloud or similar cloud-native security platform.
• Familiar with reading code and CI/CD pipelines (GitLab CI or equivalent).
• Experience running threat modelling exercises and coordinating with engineering teams.
• Strong written communication and the ability to triage high volume requests.

Responsibilities

• Vulnerability management and security tooling oversight across engineering repos.
• Triage and classify security findings; drive remediation of secrets backlog.
• Manage day-to-day vulnerability management, triage findings and engage engineers.
• Maintain engineer-facing guidance for resolving vulnerabilities and exceptions.
• Support cloud security posture management via Prisma Cloud and related teams.
• Run risk-tiered engagement cadence with engineering teams based on SLA.
• Conduct secure design and API security reviews for new services and RFCs.
• Triage security requests and respond to pen test and third-party reviews.
• Facilitate threat modelling sessions and improve practices across squads.
• Maintain runbooks and process documentation; support recurring reviews.

Skills

Python

Security tooling

Vulnerability management

Threat modelling

CI/CD pipelines

Security reviews

English communication

Tools

Snyk

Semgrep

Checkmarx

Aikido

Prisma Cloud

Job description

Rightmove is hiring an Application Security Engineer to join the growing AppSec function in London. You will own vulnerability management, security tooling, and threat modelling, working with engineering to secure design and CI/CD pipelines.

Requires hands-on security experience, Python scripting ability, and familiarity with SAST/DAST tools. Hybrid work model with two days in the office is provided, along with a comprehensive benefits package.