Senior Application Security Engineer

OJ Digital; Grã-Bretanha; Remoto; GBP 165.000 - 225.000; Tempo integral

Resumo da vaga

OJ Digital, a venture-backed AI business, seeks a Senior Application Security Engineer to own application security as it scales. You will work closely with software and ML engineers to embed practical controls into products from the outset.

This hands-on role requires coding, security automation, and defining secure patterns for AI agents, with significant ownership over product security and data access controls.

Qualificações

• 5+ years of hands-on experience in application security or product security engineering.
• Experience securing production applications at scale.
• Proficiency in Python, Go or TypeScript for tooling and automation.
• Knowledge of OWASP Top 10, AuthN/AuthZ, secure SDLC, secrets management and cryptography basics.
• Understanding of agentic AI security at the product layer.
• Active coding background and ability to ship improvements with engineers.
• Ownership mindset in a fast-moving environment.
• Familiarity with FedRAMP, HIPAA, SOC 2 or ISO 27001 is beneficial.
• Computer science degree or equivalent experience preferred.

Responsabilidades

• Own application security across production products, including authentication, authorization, secrets management and secure integrations.
• Embed threat modeling, security code reviews and automated checks into development and release workflows.
• Define secure patterns for AI agents, covering permissions, tool access, trust boundaries and output validation.
• Build security tooling and automation using Python, Go or TypeScript.
• Protect sensitive customer data through access controls, secure handling patterns and audit logging.
• Partner with product and ML engineers to turn security risks into practical controls.
• Use AI tools to accelerate code analysis, threat modeling and security reviews.

Conhecimentos

Application security

Production security at scale

Formação

Computer science degree or equivalent experience

Ferramentas

Python

Go

TypeScript

Descrição da vaga

We’re working with a growing, venture-backed AI business looking to hire a Senior Application Security Engineer to help secure its products as it scales.

The company develops AI technology for organisations handling sensitive data and complex workflows. You’ll take ownership of application security, working closely with software and ML engineers to embed practical controls into products from the outset.

This is a hands-on engineering position. You’ll write code, build security automation and shape how AI agents access data, use tools and interact with external systems. It’s an opportunity to build a security practice with substantial ownership and direct influence over product development.

• Own application security across production products, including authentication, authorization, secrets management and secure integrations.


• Embed threat modeling, security code reviews and automated checks into development and release workflows.


• Define secure patterns for AI agents, covering permissions, tool access, trust boundaries and output validation.


• Build security tooling and automation using Python, Go or TypeScript.


• Protect sensitive customer data through access controls, secure handling patterns and audit logging.


• Partner with product and ML engineers to turn security risks into practical controls.


• Use AI tools to accelerate code analysis, threat modeling and security reviews.

What We're Looking For

• 5+ years of hands-on experience in application security or product security engineering.


• Proven experience securing production applications or products operating at scale.


• Proficiency in Python, Go or TypeScript for security tooling and automation.


• Deep knowledge of application security fundamentals, including OWASP Top 10, AuthN/AuthZ, secure SDLC, secrets management, secure integration patterns and cryptography basics.


• Understanding of agentic AI security at the product layer, including secure agent design, permission scoping and risk reviews.


• An active coding background and the ability to work directly with engineers to ship improvements.


• Confidence taking ownership in a fast-moving environment where processes are still being built.


• Familiarity with FedRAMP, HIPAA, SOC 2 or ISO 27001 would be beneficial.


• A computer science degree or equivalent practical experience is preferred.


• £165,000–£225,000 base salary, depending on experience and technical depth.


• Remote working within the United Kingdom.


• Significant ownership of application and AI security.


• Close collaboration with experienced software, product and ML engineers.