Senior Application Security Engineer

ZipRecruiter; London; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

Join a forward-thinking financial services firm as a Senior Application Security Engineer. In this hybrid role, you'll collaborate with the CTO team to engineer secure solutions that protect sensitive information. Your expertise in software engineering principles, threat modeling, and modern programming languages will be crucial in assessing risks and implementing robust security measures. This dynamic position offers the chance to make a significant impact in a collaborative environment, ensuring the safety of members' money and data while enjoying a competitive salary and corporate benefits.

Qualifications

• Strong technical knowledge of software engineering and system architecture.
• Experience with threat modeling and designing security controls.

Responsibilities

• Assessing risks and delivering countermeasures to protect data.
• Configuring DevSecOps tools and designing security solutions.

Skills

Software Engineering Principles

System Architecture

Threat Modeling

Cryptographic Protocols

Modern Programming Languages

CI/CD Pipelines

Authentication and Authorization

Job description

Job Description

Senior Application Security Engineer

Location: Hybrid from any UK hub (London, Swindon, Manchester, Glasgow, Belfast)

Salary: Up to £100,000 depending on experience + discretionary bonus + additional corporate benefits

The Client: A leading financial services firm requires a senior application security engineer!

The Role:

As a Senior Application Security Engineer, you'll be part of the CTO team, assisting delivery teams in engineering secure solutions to protect members' money and data. Your responsibilities include assessing risks, delivering countermeasures, threat modelling, configuring DevSecOps tools, and designing security solutions.

Key Responsibilities:

We seek a Senior Security Engineer experienced in designing and implementing secure software, with verifiable skills in:

• Strong technical knowledge of software engineering principles, system architecture, and modern development frameworks.
• Threat modeling and designing security controls in cloud or on-premises environments.
• Cryptographic primitives and protocols.
• Proficiency in at least one modern programming language, understanding of the software development lifecycle, delivery methodologies, and industry-standard tools like version control and CI/CD pipelines.
• Knowledge of authentication, authorization, ABAC, RBAC, and collaborative skills with a sense of ownership.

Background:

• Experience in financial services or consulting is a plus but not required.
• Previous experience as a software developer, engineer, or designer is highly desirable.

If your skills match these requirements, please contact us to apply directly.