Remote Application Security Engineer – Secure-by-Design Dev

Jackalope Digital LLC; Greater London; Hybrid; GBP 65,000 - 105,000; Full time

Job summary

Prima is hiring an Application Security Engineer to join its Security Engineering Team. The role focuses on designing secure architectures, threat modeling, and proactive security testing for cloud-based web and mobile apps.

You'll implement security controls, work with Product teams to ensure robust protection, and participate in incident response. This is a full remote role with flex options for Italy, Spain, or the UK, backed by a culture of learning and growth.

Qualifications

• Strong knowledge of web/mobile security vulnerabilities (OWASP Top 10).
• Experience with threat modeling frameworks (STRIDE), code reviews, pen testing, and SAST/DAST/SCA tools.
• Proficiency in Python or Rust and experience with CI/CD and Infrastructure as Code (Pulumi).
• Availability for on-call shifts and strong English communication in an Agile environment.

Responsibilities

• Define security requirements and design secure architectures.
• Conduct threat modeling, code reviews, and penetration testing on cloud apps.
• Implement, manage, and automate security controls and WAF rules at scale.
• Partner with product teams to foster a security-first development culture.
• Respond to security alerts and participate in incident management.
• Collaborate across the Security Engineering team on core initiatives.

Skills

Web security

Threat modeling

Code reviews

Penetration testing

SAST/DAST/SCA tools

CI/CD

Infrastructure as Code

Python

Rust

On-call availability

English communication

Agile methodology

Tools

Pulumi

WAF (Cloudflare)

AWS

Kubernetes (EKS)

Job description

Prima is hiring an Application Security Engineer to join its Security Engineering Team. The role focuses on designing secure architectures, threat modeling, and proactive security testing for cloud-based web and mobile apps.

You'll implement security controls, work with Product teams to ensure robust protection, and participate in incident response. This is a full remote role with flex options for Italy, Spain, or the UK, backed by a culture of learning and growth.