Security Engineer (Application Security, United Kingdom)

Writer; Greater London; Hybrid; GBP 120,000 - 160,000; Full time

Benefits offered by this job

Health insurance

Parental leave policy

Hybrid work culture

Stock options

401k with employer contributions

Learning & development stipend

Generous PTO

London office space

Job summary

Writer is seeking a Security Engineer to build the security foundations for AI-powered applications at scale in a hybrid London-based role. You will partner with engineering to embed security into every line of code and shape product decisions from day one, not after the fact.

You will own threat modeling, CI/CD security, and secure coding standards, automating where possible and leveraging AI agents to accelerate risk mitigation while maintaining velocity for developers.

Qualifications

• 4+ years of hands-on experience in application security engineering.
• Knowledge of SAST/DAST solutions, vulnerability management platforms, security testing frameworks, and DevSecOps practices.
• Technical expertise in Python, Java, Go, or JavaScript/TypeScript and ability to read/review code across languages.
• Understanding of developer experience/workflows for shipping features; ability to balance security with velocity.
• Excellent communication to translate security concepts to technical/non-technical audiences.
• Builder mindset focused on automation, scalability, and enabling teams.

Responsibilities

• Build security into the DNA of our AI platform through threat modeling with product teams.
• Maintain and evolve application security program, CI/CD SAST/DAST in pipelines, and secure code reviews.
• Collaborate with engineers to establish secure coding standards and reusable security patterns.
• Design and recommend security features to protect customer environments.
• Leverage AI agents to increase security team velocity and proactive risk reduction.
• Lead security assessments and pen tests of applications, services, and APIs; remediate at scale.
• Design controls for data pipelines, model training environments, and customer-facing agents.
• Stay ahead of AI/ML security threats, researching attack vectors for LLMs and generative AI.

Skills

Hands-on app security

Threat modeling

Security architecture

Secure coding practices

SAST/DAST & CI/CD security

Programming (Python/Java/Go/JS/TS)

Communication

Automation mindset

Tools

SAST/DAST tools

Vulnerability management platforms

DevSecOps tooling

Job description

• This is where security meets innovation at enterprise scale


• As a security engineer, applications at WRITER, you’ll be building the security foundations that protect the AI systems powering some of the world’s most recognizable brands


• You’ll work at the intersection of application security, AI infrastructure, and developer enablement—partnering with engineering teams to embed security into every line of code while ensuring our platform remains both powerful and trustworthy


• The opportunity is massive: you’ll help define how enterprise AI applications are secured, from threat modeling our LLM architectures to building automated security controls that scale across our growing platform


• This isn’t about saying “no”—it’s about finding creative ways to say “yes, and here’s how we do it securely.” You’ll tackle challenges that most security engineers never encounter: securing AI agents, protecting training data pipelines, and designing controls for systems that didn’t exist a few years ago


• This role is hybrid from our London office, reporting to the head of security engineering


• Build security into the DNA of our AI platform by conducting threat modeling sessions with product teams, designing secure architectures for new features, and ensuring security considerations shape product decisions from day one—not after the fact


• Own and evolve our application security program including establish and maintain SAST/DAST scanning in CI/CD pipelines, conducting security code reviews for critical changes, and building automation that catches vulnerabilities before they reach production


• Partner with engineering teams to establish and champion secure coding standards, creating reusable security patterns and libraries that make it easier for developers to build securely by default


• Design and recommend security features and products that help secure customer environments. You are the advocate and the vision for how we protect and secure customers.


• Integrate and leverage AI agents to help increase velocity for the security team and the overarching engineering org to ensure that we are proactive in minimizing risk while we build products


• Lead security assessments and penetration testing of WRITER’s applications, AI services, and APIs, identifying vulnerabilities across our tech stack and working collaboratively with teams to remediate issues at scale


• Design and implement security controls for protecting data pipelines, model training environments, and customer-facing AI agents


• Stay ahead of emerging threats in the AI/ML security landscape, researching attack vectors specific to LLMs and generative AI, and proactively building defenses against novel risks

Benefits

• Health: Selection of employer-covered medical plans, plus dental, vision, life insurance, and FSA.


• Family-friendly: Competitive parental leave policy, working parents can truly own their schedules.


• Hybrid culture: We’re built around a mix of in office collaboration and remote work when needed.


• Finance: Company stock options, plus a 401k plan with employer contributions.


• Growth: Learning and development stipend and generous PTO.


• SF/NY/London office space: Three beautiful sunny offices in three incredibly exciting cities.

Alignment with WRITER’s values of Connect (building strong relationships across teams), Challenge (pushing the boundaries of what’s possible in AI security), and Own (taking end-to-end responsibility for the security of our platform)4+ years of hands-on experience in application security engineering, with a proven track record of securing large-scale production systems—bonus points if you’ve worked in fast-growing startups or high-growth environmentsKnowledge of security tools and methodologies including SAST/DAST solutions, vulnerability management platforms, security testing frameworks, and DevSecOps practices—you know which tools to use and when automation beats manual reviewTechnical expertise in at least two programming languages (Python, Java, Go, JavaScript/TypeScript) and the ability to read and review code across multiple languages, understanding both business logic and security implicationsUnderstanding of developer experience and developer workflows for shipping features and products. You care deeply about reducing risk while considering velocity of engineersExcellent communication skills that allow you to translate complex security concepts into clear recommendations for both technical and non-technical audiences—you can explain why something matters and motivate teams to actionA builder’s mindset that looks for opportunities to automate, scale, and empower rather than create bottlenecks—you understand that security enables the business, not blocks it