Hybrid App Sec Engineer - PenTesting & DevSecOps

Barclay Simpson; City Of London; Hybrid; GBP 51,000 - 85,000; Full time

Job summary

Barclay Simpson is seeking an experienced Application Security Engineer to join its security function in a hybrid role across the UK. The position focuses on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle.

You will perform pre-release manual PenTesting and threat modelling, with strong emphasis on OWASP Top 10, Veracode tooling, and cloud security in Azure or AWS. Kali Linux experience is also valued.

Qualifications

• Strong application security experience, including OWASP Top 10 and Veracode.
• Experience with DevSecOps/CI/CD and cloud security across Azure and/or AWS.
• Experience with Kali Linux and some manual PenTesting.

Responsibilities

• Focus on secure code reviews, SAST/DAST, and vulnerability assessments across the CI/CD lifecycle.
• Pre-release manual penetration testing and threat modelling.

Skills

OWASP Top 10

DevSecOps/CI/CD

Cloud security (Azure/AWS)

Kali Linux

PenTesting (manual)

Tools

Veracode

Job description

Barclay Simpson is seeking an experienced Application Security Engineer to join its security function in a hybrid role across the UK. The position focuses on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle.

You will perform pre-release manual PenTesting and threat modelling, with strong emphasis on OWASP Top 10, Veracode tooling, and cloud security in Azure or AWS. Kali Linux experience is also valued.