Senior AppSec Engineer: Embed in Engineering Teams

Cloudsmith Ltd; United Kingdom; Remote; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Equity

Flexible working

Annual leave

Professional development budget

Job summary

Cloudsmith Ltd is seeking a Senior Application Security Engineer to embed directly into one of our engineering tribes. You will advocate for security from within the core development teams, review code and architecture, and drive secure, pragmatic fixes across the stack.

You will collaborate with security, platform, and product teams to route security work efficiently and raise the security capability of engineers.

Qualifications

• 5+ years in application security or equivalent with security as a focus.
• Strong Python and modern software engineering craft.
• Deep web/API security knowledge incl. OWASP Top 10.
• Threat modeling across APIs, cloud-native systems and distributed services.
• Ability to influence engineering teams within a tribal model.

Responsibilities

• Embed within an engineering tribe and participate in planning and design reviews.
• Review code and architecture for authentication, authorization, and data access.
• Build and improve security tooling and automation for engineers.
• Threat-model product changes across APIs, data stores, and services.
• Support SOC 2, ISO 27001 and related security frameworks.

Skills

Python

Security engineering

Threat modeling

API security

Cloud security

Ownership

Education

Bachelor's degree or higher in a relevant field

Tools

AWS

CI/CD security

Job description

Cloudsmith Ltd is seeking a Senior Application Security Engineer to embed directly into one of our engineering tribes. You will advocate for security from within the core development teams, review code and architecture, and drive secure, pragmatic fixes across the stack.

You will collaborate with security, platform, and product teams to route security work efficiently and raise the security capability of engineers.