Security Design Engineer (Appsec)

Talent Smart; City of Edinburgh; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading financial services client in Edinburgh is looking for an experienced Security Design Engineer (AppSec) to lead security solution design across complex technology environments. This role involves delivering secure architectures, integrating security into CI/CD processes, and influencing security best practices across large-scale transformation programmes. Candidates should have deep application security experience, strong communication skills, and IT transformation experience. The position is contracted for 6 months, requiring office presence up to 3 days a week.

Qualifications

• Deep application security experience across cloud-native and Kubernetes environments.
• Strong expertise in integrating security testing into CI/CD.
• Ability to communicate complex security concepts effectively.

Responsibilities

• Own and deliver secure solution designs and architecture patterns.
• Partner with architects to ensure strategic alignment.
• Identify control gaps and manage residual risk.

Skills

Application security

Cloud-native environments

Microservices

CI/CD integration

Threat modelling

Communication skills

Education

Degree in cybersecurity, computer science, software engineering, or related field

CISSP, CISM, or equivalent cybersecurity certification

SABSA or TOGAF certification

Tools

Checkmarx

Invicti

Snyk

Jira

Confluence

Job description

The Company

Superb opportunity to join a leading financial services client with offices in Edinburgh.

This is an initial 6-month contract inside IR35. There will be a requirement to be in the office up to 3-days per week.

The Role

We are seeking an experienced Security Design Engineer (AppSec) to lead end-to-end security solution design across complex technology environments. You will produce high-quality architecture and design artefacts aligned to business and security standards, influence strategic direction, and provide hands‑on application security expertise across large-scale transformation programmes.

What you’ll do

• Own and deliver secure solution designs, architecture patterns, design decisions, and risk assessments
• Partner with enterprise and solution architects to ensure alignment with strategic architecture
• Provide technical leadership and act as an AppSec subject matter expert for delivery teams
• Design and embed security into modern application stacks and CI / CD pipelines
• Present designs and recommendations to design authorities and senior stakeholders
• Identify control gaps, define remediation plans, and manage residual risk
• Support governance, peer review, and architectural assurance processes

What you’ll bring

• Deep application security experience across cloud-native, microservices, containerised and Kubernetes environments
• Strong expertise in SAST, DAST, IAST, MAST, SCA, SBOMs, and supply‑chain security
• Proven experience integrating security testing into CI / CD (e.g. GitHub Actions, GitLab, Jenkins, Azure DevOps)
• Threat modelling, secure SDLC design, and risk‑based security policy development
• Experience in vulnerability and exposure management and network security concepts (segmentation, logging, scanning)
• Familiarity with industry frameworks (OWASP SAMM / ASVS, NIST SSDF, SLSA, CSA)
• Ability to communicate complex security concepts to both technical and non‑technical stakeholders
• Experience working in large, complex IT transformation programmes

Tools & technologies

• AppSec tools such as Checkmarx, Invicti, Snyk, Black Duck, Tenable (or similar)
• Architecture modelling (e.g. BizzDesign, Archi, UML)
• Jira and Confluence

Qualifications (preferred)

• Degree in cybersecurity, computer science, software engineering, or related field
• CISSP, CISM, or equivalent cybersecurity certification
• SABSA or TOGAF certification

This is an opportunity to shape secure architecture at scale, influence senior stakeholders, and drive developer‑centric security practices in a complex enterprise environment.

More details available on successful application