1 to 25 of 331 Permanent Application Security Jobs in London

Reference: SBM/AR/070570Job Type: Full-time, PermanentSalary: 80,000Location: LondonSector: ITPosted: 2026-08-25Do you have a background in Application Security, DevSecOps or Product Security, with hands-on experience embedding application security into the SDLC? If so, this could … well-established health research organisation and charity supporting large-scale medical research. You will work closely with engineering, architecture and cloud teams to integrate security throughout the software development lifecycle.Microsoft Azure and KQL experience are essential, alongside relevant experience in CI/CD, Kubernetes, API security, security ...

/AR/070467Job Type: Full-time, PermanentSalary: 70,000 - 80,000Location: LondonSector: ITPosted: 2026-07-02An opportunity has arisen for a Senior Application Security Engineer to join a well-established health research organisation and charity that supports large-scale medical research to improve disease prevention, diagnosis … treatment.As a Senior Application Security Engineer, you will play a key part in integrating security throughout the software development lifecycle, working alongside engineering and cloud teams to build, improve and maintain secure applications, platforms and deployment processes.This is not a traditional vulnerability management role ...

/AR/070467Job Type: Full-time, PermanentSalary: 70,000 - 80,000Location: LondonSector: ITPosted: 2026-07-02An opportunity has arisen for a Senior Application Security Engineer to join a well-established health research organisation and charity that supports large-scale medical research to improve disease prevention, diagnosis … treatment. As a Senior Application Security Engineer, you will play a key part in integrating security throughout the software development lifecycle, working alongside engineering and cloud teams to build, improve and maintain secure applications, platforms and deployment processes. This is not a traditional vulnerability management role ...

your voice is heard, your development is supported, and your work feels meaningful, you will feel at home at Ricoh.We're looking for an Application Security Consultant to join our Cyber, Risk & Security team and play a key role in strengthening application security across Ricoh … opportunity to work at the intersection of software engineering, cybersecurity and risk, helping our teams adopt a genuine shift-left approach and making security part of the development lifecycle from design through to deployment.You'll work across both our internal IT environment and customer-facing products and services, helping ...

Application Security Specialist Shape the Future of Secure Software Development Across a Leading Enterprise Organisation Competitive Salary + Bonus + Car Allowance + Benefits | London | Hybrid Working Join a growing Cyber, Risk & Security team and play a pivotal role in strengthening the security of products, platforms … services delivered across a complex European technology environment. As an Application Security Specialist, you'll be a key member of the Secure Development Centre of Excellence (CoE), partnering with engineering teams to embed security throughout the software development lifecycle. You'll drive a security-first culture ...

Description Reporting to the Application Security Team Lead and Programme Manager for Sustainability & Business Change (SBC), the Security & Governance Engineer will act as the embedded security contact for the SBC programme, working closely with delivery squads to embed security throughout the design, implementation and operation … prioritised and tracked. Assess implementation plans, technical designs and solution architectures, providing practical recommendations that balance security, delivery and operational requirements. Work with AppSec, CloudSec, platform engineering and delivery teams where initiatives impact products, AWS, Azure services, helping identify app and cloud security considerations and ensuring specialist expertise ...

world, allowing them to focus on delivering their business goals instead of the underlying infrastructure.Why we need this roleWe are looking for a Security Architect specialising in Application Security and DevSecOps to join the Security and Resilience – Security Architecture team.This role will … subject matter expert for secure software development and DevSecOps practices, supporting the integration of security controls into Colt’s development pipelines and ensuring applications are secure by design and by default.The successful candidate will work closely with Engineering, DevOps, Cloud, SOC and Risk teams to embed security throughout ...

Senior Cyber Security Risk Assessment Consultant - DAST/SAST/OWASP Location: London Contract: Long-term contract - 12 months Working Model: Hybrid Hiring: Multiple positions available Rate: £500 - £540 per day (Inside IR35 - must use umbrella) The Opportunity We are looking for experienced Senior Cyber Security Risk Assessment … Consultants to join a major Cyber & Information Security function within a global financial services environment. You will provide security expertise across a broad portfolio of business and technology projects, working closely with architects, engineers, developers, project teams, risk management and business stakeholders. A key part of the position ...

Security Engineer (Product Security) Salary: £80,000 - £90,000 + Excellent Benefits Location: London (Remote-first with occasional travel to the office) Employment: Full Time, Permanent This is an opportunity to join a high-growth, PE-backed cybersecurity software company where security isn't simply a support … organisations worldwide, the business develops market-leading technology that protects organisations from advanced file-based cyber threats. We're looking for a hands-on Security Engineer who enjoys getting into the detail of vulnerabilities, understanding how applications behave and working directly with developers to make software more secure. This ...

certified, qualify for diverse spending goals and are committed to economic inclusion. Find out how TripleLift raises up the programmatic ecosystem at triplelift.com.OverviewThe Senior Application Security Engineer plays a critical role in driving secure software development and application security maturity within TripleLift's Engineering and Security … platforms and the trust our publishers and advertisers place in us. In this position, you will partner closely with Engineering, Platform, Cloud Infrastructure, and Security teams to shape secure coding practices, application security tooling, vulnerability remediation, and CI/CD security, ensuring security is embedded ...

qualify for diverse spending goals and are committed to economic inclusion. Find out how TripleLift raises up the programmatic ecosystem at triplelift.com. OverviewThe Senior Application Security Engineer plays a critical role in driving secure software development and application security maturity within TripleLift's Engineering and Security … platforms and the trust our publishers and advertisers place in us. In this position, you will partner closely with Engineering, Platform, Cloud Infrastructure, and Security teams to shape secure coding practices, application security tooling, vulnerability remediation, and CI/CD security, ensuring security is embedded ...

talent, and providing exciting career opportunities that help our people grow. For more information, visit WPP.com. Department: Data & Technology Solutions (DTS) Reports To: SVP Security and Compliance Location: [London/Hybrid 2 days a week in office] Position Type: Full-Time Role Overview The Product, Application and Offensive … Security Engineer is responsible for embedding security directly into the design, development, testing, and operation of DTS products and platforms. This is a hands-on security engineering role. The role requires someone who can work directly with product and engineering teams, review designs, assess APIs, run threat ...

Principal Security Engineer in the Appstar organization, you lead application security reviews across complex systems, identify and advise on critical security risks, and mentor the broader security engineering team. You own security outcomes that reduce persistent risks and proactively shape organization-level security posture.You are responsible for establishing and maintaining the enterprise-wide application security review methodology — including threat modelling philosophy, security testing standards, and remediation validation. You design security patterns and standards that serve as the foundation for secure development across all engineering organizations, with a focus ...

Senior Application Security EngineerFortinet is looking for a Sr. Application Security Engineer to join the Corporate Information Security team. This is a highly technical role, with responsibilities conducting security reviews on various Fortinet applications, providing security education to our engineers and handling externally … reported vulnerabilities.Key Responsibilities:Serve as an application security subject matter expert who provides guidance to internal teamsWork closely with development teams, perform code reviews, penetration tests, and architectural reviews on existing codes and new features.Develop, implement, and communicate vulnerability mitigation strategies to development teamsHandle externally reported vulnerabilities ...

Senior Application Security EngineerFortinet is looking for a Sr. Application Security Engineer to join the Corporate Information Security team. This is a highly technical role, with responsibilities conducting security reviews on various Fortinet applications, providing security education to our engineers and handling externally … reported vulnerabilities. Key Responsibilities: Serve as an application security subject matter expert who provides guidance to internal teamsWork closely with development teams, perform code reviews, penetration tests, and architectural reviews on existing codes and new features. Develop, implement, and communicate vulnerability mitigation strategies to development teamsHandle externally reported ...

Application Security Engineer Location: London (3 days per week required in the office) DGH Recruitment are currently recruiting on behalf of a leading global client in the financial services industry who are looking for an Application Security Engineer to join the team on a permanent basis. … developers, thrives within a purple team space and has a passion for automation. The role will work alongside engineering and IT teams to enhance application security, API's and infrastructure by implementing preventative controls and identifying risks through testing. Responsibilities: - Act as a security champion to foster ...

wider organisation. Depending on team structure, this may include line management. AI security awareness: experience of leveraging AI to improve and scale appsec and cloud sec controls would be useful, but is not essential. Key ResponsibilitiesImprove application security guardrails Tune and evolve SAST, software composition analysis, secret … security or vulnerability management practices in a real engineering environment. Familiarity with Agile or Scrum ways of working. DesirableExperience with leveraging AI for AppSec and CloudSec. AWS Certified Security – Speciality or equivalent practical AWS security experience. Terraform or CloudFormation expertise. Incident-management or incident-response experience. Experience ...

across the wider organisation. Depending on team structure, this may include line management.AI security awareness: experience of leveraging AI to improve and scale appsec and cloud sec controls would be useful, but is not essential.Key ResponsibilitiesImprove application security guardrails Tune and evolve SAST, software composition analysis, secret … , cloud security or vulnerability management practices in a real engineering environment.Familiarity with Agile or Scrum ways of working.DesirableExperience with leveraging AI for AppSec and CloudSec.AWS Certified Security – Speciality or equivalent practical AWS security experience.Terraform or CloudFormation expertise.Incident-management or incident-response experience.Experience with Splunk or similar ...

generation. Build prompt libraries, review rubrics, validation steps, and human-in-the-loop processes for approved AI use within Information Security. Identify repetitive BISO, AppSec, and Security Architecture tasks that can be safely accelerated through AI-assisted processes. Partner with GRC, Legal, Privacy, and security leadership to ensure … vector stores, model outputs, and AI-generated code in partnership with BISO/AppSec. Security Enablement and Workload Reduction Convert recurring BISO/AppSec and Security Architecture questions into reusable guidance, decision trees, approved patterns, checklists, and self-service workflows. Build lightweight intake and routing mechanisms that help ...

Reference: 58029 Application Security Engineer (Cyber) - Financial Services Contract - Inside I35 London - Hybrid Who we’re looking for Our clients Cyber Security team is looking for a Cybersecurity engineer with expertise in Application Security domain, who will be responsible to define consistent Secure Software Development … application development experience and team leadership skills to join a growing Information Security team and assist with the operation of the AppSec function. About Us Our client is a global investment manager. They help institutions, intermediaries and individuals around the world invest money to meet their goals, fulfil ...

Tripadvisor, Inc. (Nasdaq: TRIP), include a portfolio of travel brands and businesses, including Tripadvisor, Viator, and TheFork.We are looking for an experienced Senior Application Security Engineer to join our growing team at Tripadvisor Experiences. In this role, you will take a lead position in securing the applications that … power our platform. As a Senior Engineer, you will design and implement advanced security measures, mentor junior engineers, and play a key role in ensuring the security of our products and infrastructure. This is a fantastic opportunity to influence our security practices and help shape the future ...

Tripadvisor, Inc. (Nasdaq: TRIP), include a portfolio of travel brands and businesses, including Tripadvisor, Viator, and TheFork. We are looking for an experienced Senior Application Security Engineer to join our growing team at Tripadvisor Experiences. In this role, you will take a lead position in securing the applications … that power our platform. As a Senior Engineer, you will design and implement advanced security measures, mentor junior engineers, and play a key role in ensuring the security of our products and infrastructure. This is a fantastic opportunity to influence our security practices and help shape ...

committed to removing barriers for everyone, with a focus on addressing those faced by underrepresented groups.The Role OverviewWe’re looking for a Cyber Security Engineer to help improve application security across the FT’s cloud-native technology estate. This is a hands-on role focused on making … specialist, but some exposure to AWS, cloud security or infrastructure-as-code security would be useful.We’re looking for someone with practical AppSec experience who wants to grow their impact - someone who enjoys working with engineers, improving tooling and helping security become part of normal delivery rather ...

Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities … faster, better, and more cost-effective. However, no matter what we’re building – from websites to web services, AR to AI, drones to devices – security is always our top priority. The Amazon Application Security team focuses on working with our builders to provide experiences that our customers ...

transforming customer service through AI, helping businesses deliver fast, accurate, and reliable support at scale. Trust is foundational to that mission.Fin's Security Engineering team is unlike most security teams. We own and operate critical security services, build customer-facing security features, and partner with engineering … team owns and operates tier-zero services including authentication, SAML/SSO, teammate activity logs, malicious URL scanning, and other critical trust and security capabilities.The mission of the team is to help Fin build and operate trusted AI-powered customer service experiences by making security a natural part ...