Remote Application Security Engineer - Secure Cloud Apps

JobCubby; Greater London; Hybrid; GBP 70,000 - 90,000; Full time

Benefits offered by this job

Private healthcare

Gym discounts

Wellbeing programs

Mental health support

Job summary

Prima, an expanding motor insurance tech company, is seeking an Application Security Engineer to join our Security Engineering Team. You will define security requirements, perform threat modeling, and review code across cloud-based web and mobile apps to proactively identify vulnerabilities.

Responsibilities include implementing security controls (SAST/DAST/SCA), managing WAF rules, and partnering with product teams to embed security into development. Remote work is supported across Europe.

Qualifications

• Strong knowledge of web/mobile security vulnerabilities, AI security risks, and industry standards (OWASP Top 10, CWE).
• Hands‑on experience with threat modeling frameworks (STRIDE), code reviews, penetration testing, and SAST/DAST/SCA tools.
• Proficiency in scripting/programming (Python, Rust) and experience with CI/CD systems and Infrastructure as Code (Pulumi).
• Availability for on‑call shifts to guarantee 24x7 security monitoring and support.
• Self‑motivated and proactive problem‑solvers with strong English communication skills and experience in Agile environments.

Responsibilities

• Define security requirements and design application architectures following a secure-by-default approach.
• Conduct threat modeling, code reviews, and penetration testing on cloud-based web and mobile apps to proactively identify vulnerabilities.
• Implement, manage, and automate SAST/DAST/SCA security controls and WAF rules to enforce protection at scale.
• Partner with Product teams to ensure robust protection and foster a security-first development culture.
• Participate in the investigation, management, and resolution of security alerts.
• Collaborate on all core activities and initiatives of the Security Engineering team.

Skills

OWASP Top 10

Threat modeling STRIDE

Code reviews

SAST/DAST/SCA

Python

Rust

CI/CD

Pulumi

English communication

Agile

Tools

Kubernetes (EKS)

Cloudflare WAF

Job description

Prima, an expanding motor insurance tech company, is seeking an Application Security Engineer to join our Security Engineering Team. You will define security requirements, perform threat modeling, and review code across cloud-based web and mobile apps to proactively identify vulnerabilities.

Responsibilities include implementing security controls (SAST/DAST/SCA), managing WAF rules, and partnering with product teams to embed security into development. Remote work is supported across Europe.