Senior Application Security Engineer

Senior Application Security Engineer Location: Hybrid working or homeworking with view to attend office occasionally Salary: £60,000 – £70,000 per annum Bonus: Discretionary bonus of up to 10%

Are you passionate about securing modern applications and cloud environments? We’re looking for a Senior Application Security Engineer to join my client's growing team and play a key role in shaping the security posture of our organisation.

About the Role

As a Senior Application Security Engineer, you’ll bring deep expertise in application security testing, cloud security, and secure development practices. You’ll work closely with IT, development, and project teams to embed security into every stage of the software development lifecycle and drive a risk-based approach to vulnerability management.

Key Responsibilities

• Lead application security initiatives across cloud-native and enterprise environments.
• Promote secure design principles, threat modelling, and best practices across teams.
• Own and evolve the technical vulnerability management programme.
• Implement and support security controls, particularly within Azure cloud environments.
• Evaluate and deploy best-in-class application security tools.
• Mentor teams and deliver tailored security awareness programmes.
• Assist with incident response, security training, and supplier/client security assessments.

What We’re Looking For

Essential Skills & Experience:

• Proven experience in application security engineering.
• Strong knowledge of security tools and technologies (e.g. WAFs, AV, email/web gateways, ACLs).
• Expertise in secure coding practices and security testing (SAST, DAST, SCA, Pen Testing).
• Familiarity with OWASP Top 10, CWE, and remediation strategies.
• Hands-on experience with security testing tools and techniques.
• Excellent communication and documentation skills.
• Relevant certifications (e.g. CISSP, SANS GCIA, Security+, CCNA/CCNP).
• Solid understanding of IT infrastructure, protocols, and security design.

Desirable:

• Background in threat modelling.
• Degree in Computer Science or equivalent experience.
• Knowledge of ISO27001, Cyber Essentials Plus, and cloud certifications (e.g. CSA STAR).