Senior Application Security Engineer

JR United Kingdom; Crawley; Remote; GBP 85,000 - 100,000; Full time

Job summary

A leading company in the UK is seeking a Senior Application Security Engineer to enhance its security function. This pivotal role involves integrating security into the software development lifecycle, proactively identifying vulnerabilities, and driving secure coding practices across engineering teams in a dynamic and varied environment.

Qualifications

• 5+ years of hands-on experience in application security.
• Strong knowledge of secure coding practices and common vulnerabilities (OWASP).
• Experience with SAST, DAST, and IAST tools.

Responsibilities

• Identify and fix vulnerabilities across applications.
• Conduct secure code reviews and provide remediation guidance.
• Embed automated security checks into CI/CD pipelines.

Skills

Application Security

Secure Software Development

OWASP

SAST

DAST

IAST

Threat Modelling

Job description

Social network you want to login/join with:

Senior Application Security Engineer, crawley, west sussex

col-narrow-left

Client:

Lawrence Harvey

Location:

crawley, west sussex, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

4

Posted:

31.05.2025

Expiry Date:

15.07.2025

col-wide

Job Description:

Senior Application Security Engineer

Salary: up to £100,000 + bonus + benefits

Location: UK – Remote

This company is scaling its security function and is hiring Senior Application Security Engineers to help embed secure development practices across its engineering teams. You’ll play a hands-on role in identifying and resolving vulnerabilities, integrating security into the SDLC, helping developers create software that is secure, robust, and production-ready by design.

You’ll be joining a high-impact security team at a pivotal point in the company’s growth. The environment spans legacy systems, enterprise-grade platforms, and greenfield builds – making it an ideal opportunity for individuals who thrive in varied, fast-paced environments and enjoys taking ownership of deep technical security challenges.

Responsibilities:

• Proactively identify and fix vulnerabilities across applications, including submitting secure code changes via pull requests.
• Conduct secure code reviews and provide clear remediation guidance to engineering teams.
• Embed automated security checks into CI/CD pipelines using existing AppSec tools.
• Perform threat modelling and contribute to secure design decisions.
• Develop PoCs to demonstrate risk and impact of discovered vulnerabilities.

Requirements:

• 5+ years of hands-on experience in application security and secure software development.
• Strong knowledge of secure coding practices and common vulnerabilities (OWASP)
• Experience with SAST, DAST, and IAST tools and integrating them into CI/CD pipelines.
• Ability to work closely with engineers to drive adoption of security best practices across teams.

If you're passionate about application security and want to help shape how secure software is built and delivered, click to apply or reach out directly at [emailprotected] .