Junior Application Security Engineer (Basingstoke, Hybrid: 2 days onsite)

InfoSum; Basingstoke; Hybrid; GBP 30,000 - 45,000; Full time

Job summary

A technology company in Basingstoke is seeking a Junior Application Security Engineer to assist with application security testing and support senior engineers. This role offers an opportunity to learn about application and cloud security while working closely with developers. Benefits include a competitive salary, extensive annual leave, and private health care. The environment encourages collaboration and offers various perks.

Benefits

Competitive salary

25 days annual leave

8% pension contribution

Private health care

Corporate discounts

Mental wellbeing support

Salary sacrifice schemes

Qualifications

• Some exposure to application or cloud security through university, training or internships.
• Strong willingness to learn and a proactive mindset.
• Good communication skills and enthusiasm for collaboration.

Responsibilities

• Assist with application security testing across web apps, APIs, and cloud infrastructure.
• Support penetration testing and help document findings.
• Work closely with developers to identify and remediate security issues.
• Contribute to threat modeling and risk assessments.

Skills

Application security exposure

Familiarity with OWASP Top 10

Interest in coding

Good communication skills

Tools

Security testing tools (SAST, DAST)

Go

Node.js

Job description

Infosum is looking for a Junior Application Security Engineer with a keen interest in application and cloud security. This role is perfect for someone early in their career who wants to develop hands‑on experience in securing SaaS platforms. You'll be supported by senior engineers while learning how to test applications, uncover vulnerabilities, and embed secure‑by‑design practices into products.

This position is based in Basingstoke with two days a week onsite.

What you’ll do

• Assist with application security testing across web apps, APIs, and cloud infrastructure.
• Support penetration testing and help document findings and recommendations.
• Work closely with developers to learn how to identify and remediate security issues.
• Contribute to threat modeling and risk assessments under the guidance of senior engineers.
• Gain practical experience with security testing tools and automation.
• Stay up to date with emerging application and cloud security threats and share insights with the team.

Requirements

What we’re looking for

• Some exposure to application or cloud security (through university, training or internships).
• Familiarity with common security issues (e.g., OWASP Top 10, API security basics).
• Interest in coding or ability to read code.
• Strong willingness to learn and a proactive mindset.
• Good communication skills and enthusiasm for collaboration.

Nice to have (advantageous)

• Coding experience with Go and/or Node.js.
• Cloud certifications (AWS, Azure, or GCP).
• Experience with security testing tools (SAST, DAST, or similar).

Benefits

As well as working as part of an amazing, engaging and collaborative team, we offer our staff a wide range of benefits to motivate them to be the best they can be! Here’s an overview of everything we offer right now!

• A competitive salary based on your experience and ability to perform in role
• 25 days annual leave (excluding bank holidays)
• 8% pension contribution
• Private health care via Vitality
• Fantastic corporate discounts and mental wellbeing support via Perkbox, including a top line EAP.
• Salary sacrifice schemes

We have fantastic offices in Basingstoke and London complete with a fully stocked fridge/snacks and catered lunches 2 times a week.

We also reward our teams with monthly socials, half day Fridays during the summer months of July and August, 3 extra days off during the Christmas holidays and a culture built on recognition, collaboration and success.