Senior Application Security Engineer

Tec Partners Recruitment Ltd; Greater London; On-site; GBP 92,000 - 120,000; Full time

Job summary

Tec Partners Recruitment Ltd is working with a leading technology client in London to hire a Senior Application Security Engineer. The role focuses on delivering hands-on security work across code reviews, penetration testing, and secure development lifecycle initiatives.

The successful candidate will blend hands-on delivery with cross-team guidance, acting as the go-to expert on application security for internal development teams.

Qualifications

• 5+ years in information security research or engineering.
• 3+ years auditing source code or strong programming in Java, .NET, Python, or JavaScript frameworks.
• Strong OWASP Top 10, API security and cloud-native architecture knowledge.
• Proven ability in application penetration testing and security code reviews.
• Experience with SAST, DAST, IAST and SCA tools and processes.
• Solid CI/CD and DevSecOps understanding.

Responsibilities

• Be an application security subject matter expert, guiding internal development teams.
• Perform code reviews, penetration tests, and architectural reviews on existing and new applications.
• Develop, implement, and communicate vulnerability mitigation strategies.
• Handle externally reported vulnerabilities.
• Drive the static and dynamic application security testing (SAST/DAST) programme.
• Advise development teams on secure SDLC best practices.

Skills

Application security

Code review

Penetration testing

DevSecOps

Secure SDLC

SAST/DAST/IAST/SCA

Tools

SAST tools

DAST tools

IAST tools

SCA tools

Job description

Job Title: Senior Application Security Engineer

Location: London, UK

Rate: £575 per day, Inside IR35 (dependent on experience)

Duration: 6 months

Tec Partners are working with a leading technology client, who are currently looking for an experienced Senior Application Security Engineer to work on a customer assignment, providing subject matter expertise across code review, penetration testing, and secure development lifecycle initiatives.

As a Senior Application Security Engineer, you will combine hands‑on technical delivery with cross‑team guidance, serving as the go‑to expert on application security for internal development teams.

Key Responsibilities:

• Be an application security subject matter expert, guiding internal development teams
• Perform code reviews, penetration tests, and architectural reviews on existing and new applications
• Develop, implement, and communicate vulnerability mitigation strategies
• Handle externally reported vulnerabilities
• Drive the static and dynamic application security testing (SAST/DAST) programme
• Advise development teams on secure SDLC best practices

What we are looking for:

• 5+ years' experience as an Information Security Researcher or Engineer
• 3+ years' experience manually auditing source code, or strong programming skills in Java, .NET, Python, or JavaScript frameworks
• Strong understanding of OWASP Top 10, API security risks, and cloud-native application architecture
• Proven experience in application penetration testing and security code review
• Experience with SAST, DAST, IAST, and SCA tools and processes
• Solid understanding of CI/CD pipelines and DevSecOps principles

This is an exciting opportunity for an experienced Senior Application Security Engineer to join a truly world‑class business, which will give you access to incredible learning and development opportunities, and work on assignment with an equally exciting customer.