Senior Application Security Engineer

Tec Partners Recruitment Ltd; City Of London; On-site; GBP 90,000 - 122,000; Full time

Job summary

Tec Partners Recruitment Ltd in London is seeking a Senior Application Security Engineer to provide expert guidance across code reviews, penetration testing and secure development lifecycle initiatives for a leading technology client.

You will combine hands-on delivery with cross-team guidance, serving as the go-to expert on application security for internal development teams and external stakeholders.

Qualifications

• 5+ years' experience as an Information Security Researcher or Engineer.
• 3+ years' experience auditing source code or strong programming skills in Java, .NET, Python, or JavaScript.
• Strong understanding of OWASP Top 10 and API security.

Responsibilities

• Be an application security SME guiding internal development teams.
• Perform code reviews, penetration tests, and architectural reviews.
• Develop and communicate vulnerability mitigation strategies.
• Handle externally reported vulnerabilities.
• Drive the SAST/DAST/IAST/ SCA programme.
• Advise on secure SDLC best practices.

Skills

InfoSec experience

Code audit

OWASP Top 10

Penetration testing

SAST/DAST/IAST/SCA

DevSecOps

Job description

Job Title

Senior Application Security Engineer

Location

London, UK

Rate

£575 per day, Inside IR35 (dependent on experience)

Duration

6 months

Tec Partners are working with a leading technology client, who are currently looking for an experienced Senior Application Security Engineer to work on a customer assignment, providing subject matter expertise across code review, penetration testing, and secure development lifecycle initiatives.

As a Senior Application Security Engineer, you will combine hands-on technical delivery with cross-team guidance, serving as the go-to expert on application security for internal development teams.

Key Responsibilities

• Be an application security subject matter expert, guiding internal development teams
• Perform code reviews, penetration tests, and architectural reviews on existing and new applications
• Develop, implement, and communicate vulnerability mitigation strategies
• Handle externally reported vulnerabilities
• Drive the static and dynamic application security testing (SAST/DAST) programme
• Advise development teams on secure SDLC best practices

What we are looking for

• 5+ years' experience as an Information Security Researcher or Engineer
• 3+ years' experience manually auditing source code, or strong programming skills in Java, .NET, Python, or JavaScript frameworks
• Strong understanding of OWASP Top 10, API security risks, and cloud-native application architecture
• Proven experience in application penetration testing and security code review
• Experience with SAST, DAST, IAST, and SCA tools and processes
• Solid understanding of CI/CD pipelines and DevSecOps principles