Senior Application Security & Purple Team Lead

Allwyn Uk; Waterford; On-site; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Company Bonus Scheme

Matched pension up to 8.5%

26 days annual leave + 2 Life Days

Job summary

Allwyn UK is seeking a senior security tester focused on application security testing and targeted offensive security. You will enhance testing depth across web apps, APIs and cloud workloads while building internal purple team capabilities.

The role emphasizes practical testing, threat modelling and clear remediation guidance, with experience in AWS, Spring Boot and modern architectures essential for success.

Qualifications

• Strong hands-on application penetration testing across web apps, APIs and service architectures.
• Strong understanding of Java-based backends, Spring Boot, microservices and API gateways.
• Experience testing authentication, authorization, orchestration and data validation in modern apps.

Responsibilities

• Lead and deliver advanced penetration testing across web apps, APIs and services.
• Assess backend Java/Spring Boot systems and microservice patterns.
• Test cloud-hosted, containerised environments (AWS) and platform security controls.
• Review SAST/DAST outputs and translate risks into actionable fixes.
• Support threat modelling and design reviews for testing scope.
• Develop internal testing standards, playbooks and QA processes.
• Collaborate with purple team activities and external partners.

Skills

Application penetration testing

Java Spring Boot

Cloud security (AWS)

Linux/Windows security

Threat modelling

ATT&CK framework

Purple team collaboration

Offensive security tooling

Education

CREST/OSCP/OSWE/OSEP certification or equivalent

Tools

SAST/DAST review

Job description

Allwyn UK is seeking a senior security tester focused on application security testing and targeted offensive security. You will enhance testing depth across web apps, APIs and cloud workloads while building internal purple team capabilities.

The role emphasizes practical testing, threat modelling and clear remediation guidance, with experience in AWS, Spring Boot and modern architectures essential for success.