Cloud-Native Application Security Engineer

Financial Times; England; Hybrid; GBP 85,000 - 120,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Financial Times in Greater London, United Kingdom is seeking an Application Security Engineer to strengthen FT's cloud-native security posture. You will work with product and platform teams to embed secure practices in pipelines, repositories and workflows.

The role emphasizes practical AppSec experience, threat modelling, vulnerability management, and developer-friendly security guidance, with a hybrid onsite/remote setup in London. Eligible for growth in security across engineering domains.

Qualifications

• Practical experience identifying and remediating app security risks.
• Experience working with engineers to explain and fix issues.
• Familiarity with web security risks and secure coding practices.
• Experience with vulnerability triage and remediation tracking.
• Proficiency with security tooling in development workflows.

Responsibilities

• Improve application security across the FT's cloud-native estate.
• Implement developer-friendly security guardrails in CI/CD pipelines.
• Triage vulnerabilities and guide remediation with engineering teams.
• Contribute to threat modelling sessions and security playbooks.
• Develop tooling and dashboards to improve visibility into security

Skills

Application security

DevSecOps collaboration

Python scripting

Threat modelling

CI/CD security

Security tooling

Communication

Education

Security certifications or training

Tools

SAST

Software Composition Analysis

Secret scanning

Terraform

CloudFormation

Kubernetes security

Splunk

Job description

Financial Times in Greater London, United Kingdom is seeking an Application Security Engineer to strengthen FT's cloud-native security posture. You will work with product and platform teams to embed secure practices in pipelines, repositories and workflows.

The role emphasizes practical AppSec experience, threat modelling, vulnerability management, and developer-friendly security guidance, with a hybrid onsite/remote setup in London. Eligible for growth in security across engineering domains.