Senior Application Security Engineer

JR United Kingdom; United Kingdom; Remote; GBP 60,000 - 80,000; Full time

Job summary

An innovative cybersecurity consultancy seeks a Senior Application Security Engineer to enhance secure software development. This fully remote role allows collaboration with experts across various industries, including finance and defense. You will lead initiatives to integrate security throughout the software lifecycle, conduct secure code reviews, and empower teams with best practices. Join a forward-thinking team committed to making a significant impact in the cybersecurity landscape. If you are passionate about security and eager to drive change, this opportunity is perfect for you.

Qualifications

• 3+ years in AppSec or a similar security role.
• Hands-on with AWS and cloud-native applications.
• Familiar with DevOps and CI/CD security integration.

Responsibilities

• Partner with developers to integrate security in software development.
• Lead secure code reviews and threat modeling sessions.
• Review APIs and cloud applications for security weaknesses.

Skills

Application Security

DevSecOps

Vulnerability Management

Secure Coding Practices

AWS

CI/CD Pipelines

Education

Relevant Certifications (CSSLP, OSWE, CISSP, CREST)

Tools

SAST

DAST

SCA

Terraform

CloudFormation

Job description

Social network you want to login/join with:

Senior Application Security Engineer, united kingdom

col-narrow-left

Client:

Maxwell Bond

Location:

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

2

Posted:

05.05.2025

Expiry Date:

19.06.2025

col-wide

Job Description:

Job Title: Application Security (AppSec) Consultant

Location: Remote (UK-based only)

Salary: Up to £80,000

Type: Full-time, Permanent

Are you passionate about building secure software and driving real impact in the world of cybersecurity? Our client, a cutting-edge cyber consultancy, is seeking an Application Security Consultant to strengthen their growing technical team. This is a fully remote role, offering the chance to work alongside experts from diverse industries including defence, finance, and tech— while making a real difference.

What You’ll Be Doing:

• Partnering with developers and engineers to bake security into every stage of the software development lifecycle.
• Enhancing DevSecOps practices with tools like SAST, DAST, and SCA—making sure security isn’t just an afterthought.
• Leading secure code reviews, threat modelling sessions, and providing practical guidance on secure design.
• Reviewing APIs, cloud-native applications, and infrastructure for security weaknesses—and helping remediate them.
• Acting as a point of escalation for application vulnerabilities and ensuring effective triage and resolution.
• Empowering teams through knowledge-sharing, training, and championing secure development best practices.

What We’re Looking For:

• At least 3 years’ experience in an AppSec or similar security-focused role.
• Hands-on experience with modern development environments, especially AWS-based and cloud-native applications.
• Familiarity with DevOps and CI/CD pipelines, and how to build security into them.
• A strong grasp of secure coding practices, vulnerability management, and secure architecture principles.
• Relevant certifications (such as CSSLP, OSWE, CISSP, or CREST) are a strong plus.

Bonus Points If You Have:

• AWS security certifications
• Experience with infrastructure as code (Terraform, CloudFormation) and container security
• Deep knowledge of API security and OWASP standards