Senior App Security Engineer — Hybrid & AI-Security

Red Gate International Inc.; Cambridge; Hybrid; GBP 60,000 - 75,000; Full time

Benefits offered by this job

Hybrid working

Wellbeing allowance

Learning and development

Private health insurance

Job summary

Redgate is seeking a hands-on security professional to embed security across multiple product teams, defining secure-by-default standards and guiding triage, threat modelling, and governance.

You will partner directly with engineering and product teams to implement security requirements across the full SDLC, drive SAST/DAST adoption, and support AI initiatives.

The role offers a flexible hybrid setup with strong learning and career progression.

Qualifications

• Hands-on product or application security experience embedded in a modern software development lifecycle.
• Ability to review code and communicate security issues clearly to developers (C# focus with Java/Python exposure).
• Strong knowledge of the OWASP Top 10 and practical mitigation patterns.

Responsibilities

• Partner with engineering and product teams to define and operationalise security requirements across the full SDLC.
• Own or co-own application security governance: secure-by-default standards, patterns, guardrails, and risk exceptions.
• Lead threat modelling for new features and architectural changes, turning findings into engineering work.

Skills

Security

Threat modelling

Code review

OWASP Top 10

Cloud security

Docker

Tools

SAST tools

DAST tools

AWS

Docker

CI/CD tools

Job description

Redgate is seeking a hands-on security professional to embed security across multiple product teams, defining secure-by-default standards and guiding triage, threat modelling, and governance.

You will partner directly with engineering and product teams to implement security requirements across the full SDLC, drive SAST/DAST adoption, and support AI initiatives.

The role offers a flexible hybrid setup with strong learning and career progression.