Senior App Security Engineer - Hybrid, AI Security Focus

RED GATE STORAGE; Cambridge; Hybrid; GBP 60,000 - 75,000; Full time

Benefits offered by this job

Private health insurance

Monthly wellbeing allowance

Generous paid time off

Learning and career progression

Job summary

Redgate is seeking a senior security engineer to embed security deeply into our product teams, defining requirements across the SDLC and leading threat modelling for new features. You’ll influence architecture, guardrails, and secure-by-default patterns, balancing risk with delivery velocity.

Work across engineering and product squads in a hybrid role based in Cambridge. You’ll champion SAST/DAST, support AI security initiatives, and translate security findings into pragmatic engineering work

Qualifications

• Hands-on product or application security experience embedded in modern SDLC.
• Ability to review code and communicate security issues clearly in a C# ecosystem, with exposure to Java or Python.
• Strong knowledge of OWASP Top 10 and practical mitigation patterns.
• Experience implementing or improving SAST/DAST processes with triage workflows.

Responsibilities

• Define and operationalise security requirements across the full SDLC.
• Lead threat modelling for new features and architectural changes.
• Drive SAST/DAST adoption, tuning, and developer-facing triage guidance.
• Support product teams adopting AI, including LLMs, and ensure secure deployment.

Skills

C#

Java

Python

OWASP Top 10

Threat modelling

SAST/DAST

Cloud security

Docker

AWS

Tools

AWS

Docker

SAST tools

DAST tools

Job description

Redgate is seeking a senior security engineer to embed security deeply into our product teams, defining requirements across the SDLC and leading threat modelling for new features. You’ll influence architecture, guardrails, and secure-by-default patterns, balancing risk with delivery velocity.

Work across engineering and product squads in a hybrid role based in Cambridge. You’ll champion SAST/DAST, support AI security initiatives, and translate security findings into pragmatic engineering work