Senior Application Security Engineer

JR United Kingdom; Nottingham; Remote; GBP 80,000 - 100,000; Full time

Job summary

A prominent company is seeking a Senior Application Security Engineer to enhance its security practices across engineering teams. This role involves embedding secure development practices, conducting threat modeling, and driving the adoption of security best practices throughout various projects, ideally suited for those who excel in dynamic environments.

Qualifications

• 5+ years of hands-on experience in application security and secure software development.
• Strong knowledge of OWASP vulnerabilities and secure coding.
• Experience with SAST, DAST, and IAST tools.

Responsibilities

• Identify and fix vulnerabilities across applications.
• Conduct secure code reviews with remediation guidance.
• Embed automated security checks into CI/CD pipelines.

Skills

Secure coding practices

Common vulnerabilities

SAST

DAST

IAST

Job description

Social network you want to login/join with:

Senior Application Security Engineer, nottingham

col-narrow-left

Client:

Lawrence Harvey

Location:

nottingham, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

4

Posted:

31.05.2025

Expiry Date:

15.07.2025

col-wide

Job Description:

Senior Application Security Engineer

Salary: up to £100,000 + bonus + benefits

Location: UK – Remote

This company is scaling its security function and is hiring Senior Application Security Engineers to help embed secure development practices across its engineering teams. You’ll play a hands-on role in identifying and resolving vulnerabilities, integrating security into the SDLC, helping developers create software that is secure, robust, and production-ready by design.

You’ll be joining a high-impact security team at a pivotal point in the company’s growth. The environment spans legacy systems, enterprise-grade platforms, and greenfield builds – making it an ideal opportunity for individuals who thrive in varied, fast-paced environments and enjoys taking ownership of deep technical security challenges.

Responsibilities:

• Proactively identify and fix vulnerabilities across applications, including submitting secure code changes via pull requests.
• Conduct secure code reviews and provide clear remediation guidance to engineering teams.
• Embed automated security checks into CI/CD pipelines using existing AppSec tools.
• Perform threat modelling and contribute to secure design decisions.
• Develop PoCs to demonstrate risk and impact of discovered vulnerabilities.

Requirements:

• 5+ years of hands-on experience in application security and secure software development.
• Strong knowledge of secure coding practices and common vulnerabilities (OWASP)
• Experience with SAST, DAST, and IAST tools and integrating them into CI/CD pipelines.
• Ability to work closely with engineers to drive adoption of security best practices across teams.

If you're passionate about application security and want to help shape how secure software is built and delivered, click to apply or reach out directly at [emailprotected] .