Senior Application Security Engineer

OJ Digital; United Kingdom; A distancia; GBP 165.000 - 225.000; Jornada completa

Descripción de la vacante

OJ Digital is seeking a Senior Application Security Engineer to own security across production products and to work closely with software and ML engineers to embed practical controls from the outset. The role is hands-on and involves shaping how AI agents access data, use tools and interact with external systems.

You will write code and build security automation with Python, Go or TypeScript, defending sensitive customer data while partnering with product and ML teams to turn security risks into

Formación

• 5+ years hands-on experience in application security or product security engineering.
• Experience securing production applications operating at scale.
• Proficiency in Python, Go or TypeScript for tooling and automation.
• Knowledge of OWASP Top 10, AuthN/AuthZ, secure SDLC and cryptography basics.
• Understanding agentic AI security at the product layer.
• Active coding background and ability to ship improvements with engineers.
• Confidence taking ownership in a fast-moving environment where processes are still being built.
• Familiarity with FedRAMP, HIPAA, SOC 2 or ISO 27001 would be beneficial.

Responsabilidades

• Own application security across production products, including authentication, authorization, secrets management and secure integrations.
• Embed threat modeling, security code reviews and automated checks into development and release workflows.
• Define secure patterns for AI agents, covering permissions, tool access, trust boundaries and output validation.
• Build security tooling and automation using Python, Go or TypeScript.
• Protect sensitive customer data through access controls, secure handling patterns and audit logging.
• Partner with product and ML engineers to turn security risks into practical controls.
• Use AI tools to accelerate code analysis, threat modeling and security reviews.

Conocimientos

Python

Go

TypeScript

Security tooling

Educación

Computer Science degree or equivalent

Descripción del empleo

We’re working with a growing, venture-backed AI business looking to hire a Senior Application Security Engineer to help secure its products as it scales.

The company develops AI technology for organisations handling sensitive data and complex workflows. You’ll take ownership of application security, working closely with software and ML engineers to embed practical controls into products from the outset.

This is a hands-on engineering position. You’ll write code, build security automation and shape how AI agents access data, use tools and interact with external systems. It’s an opportunity to build a security practice with substantial ownership and direct influence over product development.

• Own application security across production products, including authentication, authorization, secrets management and secure integrations.


• Embed threat modeling, security code reviews and automated checks into development and release workflows.


• Define secure patterns for AI agents, covering permissions, tool access, trust boundaries and output validation.


• Build security tooling and automation using Python, Go or TypeScript.


• Protect sensitive customer data through access controls, secure handling patterns and audit logging.


• Partner with product and ML engineers to turn security risks into practical controls.


• Use AI tools to accelerate code analysis, threat modeling and security reviews.

What We're Looking For

• 5+ years of hands-on experience in application security or product security engineering.


• Proven experience securing production applications or products operating at scale.


• Proficiency in Python, Go or TypeScript for security tooling and automation.


• Deep knowledge of application security fundamentals, including OWASP Top 10, AuthN/AuthZ, secure SDLC, secrets management, secure integration patterns and cryptography basics.


• Understanding of agentic AI security at the product layer, including secure agent design, permission scoping and risk reviews.


• An active coding background and the ability to work directly with engineers to ship improvements.


• Confidence taking ownership in a fast-moving environment where processes are still being built.


• Familiarity with FedRAMP, HIPAA, SOC 2 or ISO 27001 would be beneficial.


• A computer science degree or equivalent practical experience is preferred.


• £165,000–£225,000 base salary, depending on experience and technical depth.


• Remote working within the United Kingdom.


• Significant ownership of application and AI security.


• Close collaboration with experienced software, product and ML engineers.