Senior AppSec Engineer: Secure Cloud Apps & CI/CD

Talentify; United Kingdom; Remote; GBP 87,000 - 131,000; Full time

Benefits offered by this job

Health & Wellness

Competitive pay

401k with matching

Life insurance

Disability insurance

Tuition reimbursement

Paid time off

Parental leave

Pet Insurance

Employee discount

Job summary

World Wide Technology is hiring a Senior Application Security Engineer to secure our software ecosystem and enable rapid, secure delivery. You will lead threat modeling, secure code reviews, and tooling automation across containerized, hybrid-cloud environments.

You will partner with engineering, DevOps, and risk teams to embed security in the SDLC, drive remediation, and mentor teams on secure coding practices. This role emphasizes hands‑on defense and scalable security practices.

Qualifications

• Bachelor’s degree or equivalent hands-on experience in CS/SE/InfoSec.
• 8+ years in AppSec, information security, or SecDevOps.
• Proven ownership of AppSec domains and remediation without close supervision.
• Hands-on with SAST, SCA, secrets, IaC; integrate into CI/CD.
• Experience securing cloud-native apps with Docker/Kubernetes on AWS/Azure/GCP.
• Scripting in Python, Bash, or PowerShell.
• Understanding of auth, SSO, OAuth2/OIDC; session management.
• TLS/PKI/secrets management; cryptography basics.
• Strong HTTP/API security knowledge (OAuth2/OIDC, JWT).
• Secure SDLC, security gates/controls.
• Familiarity with OWASP ASVS/Top 10, MITRE ATT&CK, CWE.
• NIST/ISO/SOC2/CMMC awareness.
• Threat modeling (STRIDE/PASTA).
• Excellent communication; explain risk to engineers.
• Self-starter, team player, eager to learn.
• Authorized to work in United States without sponsorship.

Responsibilities

• Own the vulnerability lifecycle from discovery to remediation.
• Dismiss false positives and document actionable remediation.
• Maintain playbooks for triage and remediation.
• Operate and maintain SCA/SAST/DAST tooling across the SDLC.
• Perform secure code reviews and threat modeling (STRIDE/PASTA).
• Penetration testing across web, API, infrastructure, and AI systems.
• Secure AI/LLM applications; manage prompt injection risks.

Skills

AppSec experience

CI/CD security

Cloud security

Scripting (Python/Bash/PowerShell)

Authentication/Identity (SSO, OAuth2/O

Education

Bachelor’s degree in Computer Science/Software Engineering/InfoSec, or equivalent hands-on experience

Tools

SAST

SCA

CI/CD tools (GitHub Actions, GitLab CI, Jenkins, Azure DevOps)

Security platforms (Wiz, Snyk, Apiiro, Cycode, Veracode, Checkmarx)

Job description

World Wide Technology is hiring a Senior Application Security Engineer to secure our software ecosystem and enable rapid, secure delivery. You will lead threat modeling, secure code reviews, and tooling automation across containerized, hybrid-cloud environments.

You will partner with engineering, DevOps, and risk teams to embed security in the SDLC, drive remediation, and mentor teams on secure coding practices. This role emphasizes hands‑on defense and scalable security practices.