Senior AppSec Engineer — Flexible Hours

Elsevier

City Of London

On-site

GBP 90,000 - 120,000

Full time

14 days+

Application generator

Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.

Get past ATS filters

Job summary

Elsevier is seeking a Senior Application Security Engineer to strengthen secure software delivery across engineering teams. You will embed security practices, tools, and automation into development workflows to enable secure-by-default delivery at scale.

You will partner with development teams to reduce risk, protect CI/CD pipelines, and drive reusable security templates and reference implementations. This role emphasizes collaboration with platform, architecture, and security teams to improve

Qualifications

5+ years in application security, software engineering, or product security.
Knowledge of application security principles, vulnerabilities, and secure coding across multiple stacks.
Understanding of CI/CD security, including pipeline controls, IAM, and secrets handling.
Experience integrating automated security tooling into software delivery workflows.

Responsibilities

Partner with development teams to improve secure software delivery across applications and CI/CD pipelines.
Support triage and remediation of application security findings through practical guidance and secure refactoring recommendations.
Facilitate threat modelling activities and translate outcomes into actionable improvements and risk reduction measures.
Design and maintain secure-by-default delivery patterns, reusable templates, and reference implementations.
Support adoption of centrally managed tooling and automated security controls.
Develop integrations and automation to enable security validation, audit evidence generation, and operational metrics.
Collaborate with platform, architecture, and security teams to improve processes, tooling, and delivery capabilities.
Communicate security guidance, standards, and best practices to stakeholders.