Remote Application Security Engineer - Secure Apps

Prima; Greater London; On-site; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Private healthcare

Gym discounts

Wellbeing programs

Mental health support

Job summary

Prima is expanding its Security Engineering team and seeks a Security Engineer to shape the secure-by-default architecture for our cloud-based apps. You will work with 350+ engineers across software, infrastructure, and operations to proactively protect platforms and data.

Ideal candidates bring hands-on experience with threat modeling, SAST/DAST/SCA tools, and modern CI/CD pipelines. The role offers remote work options with flexibility across UK, Europe and beyond.

Qualifications

• Strong knowledge of web/mobile security vulnerabilities and OWASP Top 10.
• Experience with threat modeling (STRIDE), code reviews, penetration testing, and SAST/DAST/SCA tools.
• Scripting/programming in Python and Rust; experience with CI/CD and IaC (Pulumi).
• Availability for on-call shifts to provide 24x7 security monitoring.
• Excellent English communication; experience in Agile environments.

Responsibilities

• Define security requirements and secure-by-default architectures.
• Conduct threat modeling, reviews, and testing to identify vulnerabilities.
• Manage SAST/DAST/SCA controls and WAF rules at scale.
• Partner with Product teams to foster a security-first culture.
• Participate in investigation and resolution of security alerts.
• Collaborate on core Security Engineering initiatives.

Skills

OWASP Top 10

Threat modeling

Code reviews

Penetration testing

SAST/DAST/SCA tools

Python

Rust

CI/CD

Infrastructure as Code

Pulumi

On-call

English communication

Agile

Tools

Pulumi

Job description

Prima is expanding its Security Engineering team and seeks a Security Engineer to shape the secure-by-default architecture for our cloud-based apps. You will work with 350+ engineers across software, infrastructure, and operations to proactively protect platforms and data.

Ideal candidates bring hands-on experience with threat modeling, SAST/DAST/SCA tools, and modern CI/CD pipelines. The role offers remote work options with flexibility across UK, Europe and beyond.