Remote Senior AppSec Engineer - Secure SaaS & Cloud

Smart Communications group; United Kingdom; Remote; GBP 65,000 - 95,000; Full time

Benefits offered by this job

Health insurance

Income protection

Life assurance

Gym membership subsidy

Travel insurance

Pension contribution

25 days holiday + birthday day

Job summary

Smart Communications is seeking an experienced Application Security Engineer to secure SaaS platforms, APIs and cloud-native services across private and public clouds. You will embed security across the SDLC, promote a shift-left culture and enable developers with secure design guidance and tooling.

You will collaborate with Engineering, DevOps, Architecture and Product teams to prioritise remediation, perform manual and automated testing and strengthen controls such as authentication,

Qualifications

• 5+ years’ hands-on experience in Application Security, Product Security, DevSecOps or similar security engineering role.
• Experience with OWASP Top 10, API security, authentication/authorisation, session management, cryptography, cloud security (AWS).
• Proven ability to embed security into the SDLC through secure design reviews, threat modelling, testing and CI/CD security.

Responsibilities

• Develop secure-by-design and DevSecOps practices with cross-functional teams.
• Identify and mitigate security risks across authentication, authorisation, secrets management, encryption and cloud security.
• Perform threat modelling, secure design reviews, security assessments, and testing across web apps, APIs, and cloud services.
• Operate and improve application security tooling (DAST, SCA, IaC, container scanning) and triage vulnerabilities.
• Drive remediation prioritisation and track emerging threats with engineering teams.

Skills

Application Security

DevSecOps

Threat Modelling

CI/CD

Secure Coding

Cloud Security AWS

Education

Degree in Computer Science or Cyber Security

Related certifications (optional)

Tools

DAST

SCA

IaC

Container Scanning

Job description

Smart Communications is seeking an experienced Application Security Engineer to secure SaaS platforms, APIs and cloud-native services across private and public clouds. You will embed security across the SDLC, promote a shift-left culture and enable developers with secure design guidance and tooling.

You will collaborate with Engineering, DevOps, Architecture and Product teams to prioritise remediation, perform manual and automated testing and strengthen controls such as authentication,