Senior Application Security Engineer

Hackajob Ltd; Chesterton; Hybrid; GBP 60,000 - 75,000; Full time

Benefits offered by this job

Wellbeing allowance

Private health insurance

Paid time off

Learning & career progression

Job summary

Hackajob Ltd. in Cambridge is hiring a permanent Product Security role. You will partner with engineering to define secure SDLC requirements, own security governance, and lead threat modelling for new features.

You will drive SAST/DAST adoption, tune tools, and mentor developers in secure coding. AI security and cloud native tech are core priorities with flexible hybrid work.

Qualifications

• Hands-on product or application security experience across SDLC.
• Ability to review code in C#; exposure to Java or Python is advantageous.
• Strong knowledge of OWASP Top 10 and mitigation patterns.

Responsibilities

• Partner with engineering and product teams to define security requirements across the SDLC.
• Own or co-own application security governance, standards, guardrails, and risk exceptions.
• Lead threat modelling for new features and architectural changes.
• Drive SAST/DAST adoption, tool tuning, and triage guidance for developers.
• Support product teams adopting AI, including LLMs and MCP.

Skills

Security

OWASP Top 10

Code review

SAST/DAST

Cloud security

AWS

Docker

C#

Java

Python

Tools

Redgate

Job description

Salary: £75,000 - 75,000 per year

Requirements:

• Hands-on product or application security experience, embedding security practices across a modern software development lifecycle.
• Ability to review code and communicate security issues clearly to developers, primarily within a C# ecosystem, with exposure to Java or Python.
• Strong knowledge of the OWASP Top 10 and practical mitigation patterns.
• Experience implementing or improving SAST/DAST processes, including tool tuning, triage workflows, and reducing signal to noise.
• Working understanding of cloud and container security fundamentals, ideally with AWS and Docker.

Responsibilities:

• Partner directly with engineering and product teams to define and operationalise security requirements across the full SDLC.
• Own or co‑own application security governance, including secure‑by‑default standards, patterns, guardrails, and risk exceptions.
• Lead threat modelling for new features and architectural changes, turning findings into practical engineering work.
• Drive SAST/DAST adoption and quality, including tool tuning, severity calibration, and developer‑facing triage guidance.
• Support product teams adopting AI, including LLMs, SLMs, and MCP.

Technologies:

• AI
• AWS
• C#
• Cloud
• Docker
• Embedded
• Support
• Java
• MCP
• OWASP
• Python
• Redgate
• Security

More:

We are hiring for a permanent role based in Cambridge with a flexible hybrid working pattern, requiring time in the office once every two weeks. The salary range is £60,000 to £75,000, subject to experience. We build solutions that help data professionals securely manage the data and databases their organisations depend on, and we work in an environment built on trust, accountability, and collaboration. We are investing in AI and cloud‑native technologies, and everyone at Redgate works with Claude from day one. You will join our Product Security team, embedded across multiple product and engineering teams, with the opportunity to shape how security is done in practice, contribute to pragmatic risk reduction, and explore emerging areas such as AI security. We also offer a monthly wellbeing allowance, generous paid time off, genuine investment in learning and career progression, and private health insurance.

last updated 36 week of 2026