Senior App Security Engineer — Build Secure, Scalable Apps

LexisNexis Risk Solutions; Oxford; Hybrid; GBP 80,000 - 110,000; Full time

Job summary

Elsevier is seeking a Senior Application Security Engineer to strengthen secure software delivery across engineering teams. You will embed security practices, tools, and automation into development workflows to enable secure applications and CI/CD pipelines.

You will guide practical security improvements, design reusable templates and reference implementations, and collaborate with cross-functional teams to reduce risk and improve delivery outcomes at scale.

Qualifications

• Experience in application security, software engineering, or product security.
• Knowledge of principles, vulnerabilities, and secure coding across stacks.
• 5+ years in relevant security or engineering roles.
• BS Engineering/CS or equivalent experience required.
• Understanding of CI/CD security and IAM/secrets handling.
• Experience integrating automated security tooling.
• Experience developing templates, standards, and reference implementations.
• Familiarity with security automation and audit evidence generation.
• Awareness of industry security standards and best practices.
• Strong collaboration, communication, analytics, and problem-solving.

Responsibilities

• Partner with development teams to improve secure software delivery in applications and CI/CD pipelines.
• Triage and remediate security findings with practical guidance and secure refactoring.
• Facilitate threat modelling and translate outcomes into actionable improvements.
• Design and maintain secure-by-default delivery patterns, templates, and references.
• Support adoption of centrally managed tooling and automated security controls.
• Develop integrations to enable security validation, audit evidence generation, and metrics.
• Collaborate with platform, architecture, and security teams to improve processes and tooling.
• Communicate security guidance, standards, and best practices to stakeholders.

Skills

Application security

Software engineering

Product security

CI/CD security

Threat modelling

Templates & references

Security tooling

Automation tooling

Security standards

Communication skills

Education

BS Engineering/Computer Science or equivalent

Job description

Elsevier is seeking a Senior Application Security Engineer to strengthen secure software delivery across engineering teams. You will embed security practices, tools, and automation into development workflows to enable secure applications and CI/CD pipelines.

You will guide practical security improvements, design reusable templates and reference implementations, and collaborate with cross-functional teams to reduce risk and improve delivery outcomes at scale.