Senior Application Security Engineer

JR United Kingdom; City Of London; Remote; GBP 80,000 - 100,000; Full time

Job summary

A leading company is seeking a Senior Application Security Engineer to enhance secure development practices within their security team. The role includes identifying vulnerabilities, conducting code reviews, and integrating security into CI/CD pipelines. This is an excellent opportunity to shape application security efforts in a dynamic environment.

Qualifications

• 5+ years of hands-on experience in application security.
• Experience integrating SAST, DAST into CI/CD pipelines.

Responsibilities

• Identify and fix application vulnerabilities.
• Conduct secure code reviews and provide remediation guidance.
• Develop PoCs demonstrating risk of discovered vulnerabilities.

Skills

Secure coding practices

Understanding of vulnerabilities (OWASP)

Experience with SAST

Experience with DAST

Experience with IAST

Tools

CI/CD

AppSec tools

Job description

Social network you want to login/join with:

Senior Application Security Engineer, london (city of london)

col-narrow-left

Client:

Lawrence Harvey

Location:

london (city of london), United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

2

Posted:

16.06.2025

Expiry Date:

31.07.2025

col-wide

Job Description:

Senior Application Security Engineer

Salary: up to £100,000 + bonus + benefits

Location: UK – Remote

This company is scaling its security function and is hiring Senior Application Security Engineers to help embed secure development practices across its engineering teams. You’ll play a hands-on role in identifying and resolving vulnerabilities, integrating security into the SDLC, helping developers create software that is secure, robust, and production-ready by design.

You’ll be joining a high-impact security team at a pivotal point in the company’s growth. The environment spans legacy systems, enterprise-grade platforms, and greenfield builds – making it an ideal opportunity for individuals who thrive in varied, fast-paced environments and enjoys taking ownership of deep technical security challenges.

Responsibilities:

• Proactively identify and fix vulnerabilities across applications, including submitting secure code changes via pull requests.
• Conduct secure code reviews and provide clear remediation guidance to engineering teams.
• Embed automated security checks into CI/CD pipelines using existing AppSec tools.
• Perform threat modelling and contribute to secure design decisions.
• Develop PoCs to demonstrate risk and impact of discovered vulnerabilities.

Requirements:

• 5+ years of hands-on experience in application security and secure software development.
• Strong knowledge of secure coding practices and common vulnerabilities (OWASP)
• Experience with SAST, DAST, and IAST tools and integrating them into CI/CD pipelines.
• Ability to work closely with engineers to drive adoption of security best practices across teams.

If you're passionate about application security and want to help shape how secure software is built and delivered, click to apply or reach out directly at [emailprotected] .