Hybrid Application Security Engineer (Software) – London

Source Group International; Greater London; Hybrid; GBP 70,000 - 110,000; Part time

Job summary

Source Group International in London is seeking an experienced Application Security Engineer (Software) for a hybrid role, combining security engineering with software development. You will collaborate with a Tier 1 bank to implement secure coding practices across the SDLC.

The role requires deep OWASP knowledge, threat modelling, cloud security in Azure/AWS, and hands-on coding in Python/JavaScript/C#/PowerShell with strong collaboration across development teams.

Qualifications

• Application Development background.
• Experience in Application or Product Security.
• Experience using AI models for security evaluation.
• Proficient in Python/JS/C#/PowerShell.
• Experience in large organisations or Financial Services is an advantage.

Responsibilities

• Design, maintain and build product security tools and services.
• Act as technical point of contact for CI/CD and product security operations.
• Use AI models and cyber harnesses to assess code for weaknesses.
• Build tools and automation scripts for secure coding.
• QA and testing of security products.
• Explain penetration findings to development teams and mitigate risks.
• Explain business risk when assessing vulnerabilities.
• Improve SAST, DAST, IaC security tools and WAF/IDS coverage.
• Improve security tooling in cloud environments (Azure & AWS).

Skills

Application security experience

Software development background

Programming (Python/JavaScript/CSharp/

Threat modelling & security testing

Team collaboration & communication

Education

Computer Science / Cyber Security Degree

CISSP / CSSLP / CEH / OSCP or similar certification

Tools

GitHub Copilot

Codex

OWASP Top 10

Job description

Source Group International in London is seeking an experienced Application Security Engineer (Software) for a hybrid role, combining security engineering with software development. You will collaborate with a Tier 1 bank to implement secure coding practices across the SDLC.

The role requires deep OWASP knowledge, threat modelling, cloud security in Azure/AWS, and hands-on coding in Python/JavaScript/C#/PowerShell with strong collaboration across development teams.