Senior Application Security Engineer - Strategy & Delivery

Brunswick Group; Greater London; On-site; GBP 110,000 - 140,000; Full time

Job summary

Brunswick Group seeks a Lead Application Security Engineer to shape and mature its application security capability. You will provide senior security guidance across internally developed apps, cloud services, APIs, and AI-enabled workstreams, working with ICT and business stakeholders to balance risk with rapid delivery.

You will mentor teams, define guardrails, and oversee threat modelling, security reviews, and secure design patterns, with potential growth of the security function over time.

Qualifications

• 7+ years in cyber security, application security, DevSecOps, cloud security or related security role.
• Experience as senior technical advisor or lead in application security, DevSecOps, cloud security or secure engineering.
• Experience securing applications throughout the delivery lifecycle with software engineering/DevOps teams.
• Knowledge of secure development lifecycle, threat modelling, API security, authentication & authorization, dependencies, and remediation planning.
• Familiarity with AI-enabled technologies and associated risks is a plus.

Responsibilities

• Lead development of Brunswick's application security capability, including standards and guardrails.
• Advise ICT, AI Engineering, and stakeholders on security design decisions.
• Review designs, APIs, cloud services, and deployment patterns for security risks.
• Mature repeatable security reviews, threat modelling, and risk-based assurance.
• Guide secure development lifecycle practices and release security considerations.
• Conduct threat modelling for AI-enabled workflows and integrations.
• Support penetration testing and security testing activities.
• Document security requirements and remediation actions.

Skills

Security strategy

Threat modelling

DevSecOps

Cloud security

Security reviews

Education

Certifications: CISSP/CCSP/SSCP/CSSLP

Certifications: CISM/CISA/CRISC

Certifications: Security+ / CySA+ / CASP+

Tools

Azure

Entra ID

Key Vault

API Management

Job description

Brunswick Group seeks a Lead Application Security Engineer to shape and mature its application security capability. You will provide senior security guidance across internally developed apps, cloud services, APIs, and AI-enabled workstreams, working with ICT and business stakeholders to balance risk with rapid delivery.

You will mentor teams, define guardrails, and oversee threat modelling, security reviews, and secure design patterns, with potential growth of the security function over time.