1 to 25 of 123 Permanent Application Security Jobs in London

Security Solutions Architect Location: London hybrid, office based 3 days per week Salary: £140-185K base with £180-230K OTE plus excellent benefits package About the Opportunity Our client is a global enterprise software company at the forefront of DevSecOps, Application Security, and software supply … Strong background working with large enterprise customers and complex, multi-stakeholder security environments Experience gained across one or more relevant areas, such as AppSec, DevSecOps platforms, cloud security, developer platforms, security consulting, or enterprise software Deep understanding of secure SDLC practices and how security ...

Senior Cyber Security Analyst (OWASP/SAST/DAST – Banking Client Application Security | Secure Design | Threat Modelling | DevSecOps) Locations: London, Paris, Brussels, Amsterdam Rate: Flexible Duration: 12 months We are looking for a Cyber Security Analyst specialising in Application Security and Secure Architecture … join a high-performing security team responsible for protecting large-scale enterprise platforms. This role focuses on embedding security into application design and development, performing security risk assessments, and ensuring that modern applications and platforms are built following secure-by-design principles. You will work closely ...

Application Security Manager has an important role and is responsible for ensuring TSB applications and third party products are developed and maintained is a secure way protects that Bank from threats. • Spearhead the red teaming across our software application estate, including mobile, web, cloud … orchestrating a comprehensive assessment along with simulated attacks to ultimately ensure a fortified security posture and inspire confidence into the TSB business. • Work closely with Business Value Streams and 3rd party suppliers to ensure application risks are identified, resolved and reported appropriately. • Support the business in meeting ...

company's contact data and contextual signals are trusted by thousands of revenue teams to eliminate the guesswork from prospecting. THE ROLE The Senior Application Security Engineer is a key member of the company's Information Security Team, reporting into the Application & Infrastructure Security Manager. … Your mission is to embed security by design across our engineering and product organization by integrating modern application security practices throughout the full development lifecycle. We focus on building secure, scalable, and resilient systems while enabling the business to innovate quickly and safely. It is to drive ...

Category Product Security Engineering Posting Date 06/25/2026, 03:40 PM Job Schedule Full time Job Description Senior Application Security Engineer Fortinet is looking for a Sr. Application Security Engineer to join the Corporate Information Security team. This is a highly … technical role, with responsibilities conducting security reviews on various Fortinet applications, providing security education to our engineers and handling externally reported vulnerabilities. Key Responsibilities: Serve as an application security subject matter expert who provides guidance to internal teams Work closely with development teams, perform code reviews ...

Threat Modeling program, establishing threat modeling standards, methodologies, and governance, and building a high-performing team of threat modeling professionals. You will partner with application development, cloud engineering, cybersecurity, and business stakeholders to proactively identify and mitigate security risks across the software development lifecycle, cloud environments, and emerging … technology initiatives.Why This Role Is Important To UsThe team you will be joining is part of the Security Architecture organization, a function that is critical to the firm's ability to design and deliver secure technology solutions. As cyber threats continue to evolve, threat modeling serves as a foundational ...

wider organisation. Depending on team structure, this may include line management. AI security awareness: experience of leveraging AI to improve and scale appsec and cloud sec controls would be useful, but is not essential. Key Responsibilities Improve application security guardrails Tune and evolve SAST, software composition analysis … security or vulnerability management practices in a real engineering environment. Familiarity with Agile or Scrum ways of working. Experience with leveraging AI for AppSec and CloudSec. AWS Certified Security – Speciality or equivalent practical AWS security experience. Terraform or CloudFormation expertise. Incident‐management or incident‐response experience. Experience ...

Head of Security Engineering (Product Security) Salary: £100,000 - £110,000 + Excellent Benefits Location: UK (Remote-first with occasional travel to London) Employment: Full Time, Permanent This is an opportunity to join a high-growth, PE-backed cybersecurity software company where security isn't simply something … Infrastructure organisations worldwide, the business develops market-leading technology that protects organisations from file-based cyber threats. We're looking for an engineering-first security leader who still enjoys getting into the technical detail. This isn't a governance, compliance or traditional security management position. Instead ...

Head of Product Security – BPL CISO Product Security | CISO Function Department: CISO Function — Product Security Reports To: Chief Information Security Officer (CISO) The Head of Product Security leads the pillar responsible for ensuring everything the company builds and ships is secure by design. This … application security or product security, with a number of years in a leadership role managing a product security or AppSec team. Deep understanding of modern application security: OWASP Top 10, API security (REST, gRPC, GraphQL), microservices security, container security, and secure ...

Amazon Development Centre (London) Limited The AppSec Security Engineer evaluates service design and architecture and performs deep‐dive security assessments to ensure applications and services meet a high security bar before launch. This role works alongside senior engineers to identify issues, drive remediation, and validate that security requirements are met. Key job responsibilities Security Reviews: Conduct design reviews for new and existing services, evaluating architecture documents and system designs for security risks. Threat Modelling: Identify attack vectors and security weaknesses in application architectures through structured threat‐modelling exercises. Penetration Testing: Coordinate penetration ...

Application Security Engineer, Audio, Twitch & Games (ATG) Security Job ID: 10488481 | Amazon Development Centre (London) Limited We are changing the way millions of customers interact with entertainment that enriches lives. Audio, Twitch & Games (ATG) delivers experiences at unparalleled scale. Whether it's launching our own studio … create original and exclusive content, or connecting players and developers to the games and communities they love, ATG Security is at the center of customer, builder and content journeys. Our vision is to be the most loved and trusted entertainment service by empowering the business with innovative security ...

transforming customer service through AI, helping businesses deliver fast, accurate, and reliable support at scale. Trust is foundational to that mission. Fin’s Security Engineering team is unlike most security teams. We own and operate critical security services, build customer‐facing security features, and partner with … team owns and operates tier‐zero services including authentication, SAML/SSO, teammate activity logs, malicious URL scanning, and other critical trust and security capabilities. The mission of the team is to help Fin build and operate trusted AI‐powered customer service experiences by making security a natural ...

About the role You will report directly to the Head of Information Security and work alongside a Senior Technical Support Engineer to form the senior core of the IT Delivery and Security Services team. You will own a broad portfolio of security responsibilities, from application security … Minimum of 5 years' experience in application security, product security, or a combination of software engineering and security with strong AppSec ownership. Hands‐on experience with Snyk across SCA, SAST, Container, and IaC, including CI/CD integration and policy management. Strong grounding in modern ...

advisory engagements (hybrid working arrangements in place). Salary: £84,000 - £100,000 Benefits: Car allowance, Bupa, Matched pension contributions. The Role Group Cyber Security Overview The Group Cyber Security (GCS) team is responsible for managing cyber risk appropriately across the Group and has recently refreshed its cyber … strategy, with a renewed focus on embedding cyber security as part of the culture and DNA. The Group operates a highly federated business model spanning 11 divisions and over 50 countries, and the cyber strategy has been designed to build materially improved security capabilities whilst working with ...

deliver fast, accurate, and reliable support at scale. Trust is foundational to that mission. What will I be doing? Own and engineer tier-zero security capabilities that help customers securely deploy and manage Fin. Design, build, and evolve customer-facing security features, including authentication, SAML/SSO, permissions … systems, audit and activity logging, malicious URL scanning, and other enterprise security controls. Partner with engineering teams throughout the software development lifecycle to build secure products and services. Perform architecture reviews, threat modelling exercises, and security assessments for new features and systems. Build security tooling, automation ...

career, this could be your moment. As our Senior DevSecOps Engineer, you’ll play a key part in delivering secure applications and hands‐on security support to our developers to ensure they are fixing the right things, getting hands‐on as a technical authority across development, platform, operations … information security, this is a multi‐disciplinary engineering role with a focus on application and platform security controls, working closely with development teams to improve security outcomes. Your drive and ideas will help us move faster, improve smarter, and stay ahead of the game. What ...

OPPORTUNITY We are building Watcher, a coding agent security product. We are looking for a security & control expert to help us design better threat models and control protocols against AI adversaries, and improve the effectiveness and security of Watcher. A security & control expert embedded … tests. Own technical content of customer‐facing communications during incidents. Improving security posture for product (25%) Attack surface, infrastructure, and isolation Own AppSec standards for the product engineering team (code review security checklists, dependency scanning, secrets management in CI/CD, container hardening) Own vendor security decisions ...

Senior iOS Security Engineer (ProdSec) at iProov Senior iOS Security Engineer About iProov iProov provides science-based biometric solutions that enable the world’s most security-conscious organizations to streamline secure remote onboarding and authentication for digital and physical access. Our award-winning liveness technology and iSOC … against deepfakes and generative AI threats while ensuring effortless, scalable user experiences. Trusted by leading governments and enterprises, including the U.S. Department of Homeland Security, U.K. Home Office, GovTech Singapore, ING, and UBS, iProov sets the standard in biometric identity assurance. The Role Reports to: Head of Red Team ...

Role We are seeking a Head of Security to build and own the security program that enables Geordie to move incredibly quickly without compromising trust through its next stage of growth. You’ll be joining a rapidly growing team and product that is already serving some … world’s largest enterprises. You'll combine modern security engineering, thoughtful governance and AI-first operations to ensure our customers, employees and partners can confidently rely on Geordie as we scale. With SOC 2 Type II and ISO 27001 already in place, your mission is to build an effective ...

carbon energy. We work at the cutting edge of the transition to a sustainable, net zero world. We are seeking an Information Security Technical Assurance Lead to join our team at our Paddington Head Office. This role sits within the CISO function, which is dedicated to continuously evolving … strengthening Urenco s cyber security capabilities to protect our business, customers, and the wider public, while supporting the safe and sustainable use of nuclear technology. As part of the Cyber Security Assurance team , and reporting to the Head of Cyber Security Assurance, you will play ...

carbon energy. We work at the cutting edge of the transition to a sustainable, net zero world. We are seeking an Information Security Technical Assurance Lead to join our team at our Paddington Head Office. This role sits within the CISO function, which is dedicated to continuously evolving … strengthening Urenco’s cyber security capabilities to protect our business, customers, and the wider public, while supporting the safe and sustainable use of nuclear technology. As part of the Cyber Security Assurance team , and reporting to the Head of Cyber Security Assurance, you will play ...

Company Description The Product Security team at NielsenIQ is dedicated to enhancing business application security and making product teams accountable throughout the software development lifecycle. It not only protects NIQ revenue, it also enables revenue generation through faster delivery of higher quality and more secure NIQ products. … NielsenIQ is recruiting a Senior Director of Product Security to further bolster and mature its product security programs. The successful candidate will be responsible for leading and driving the rollout of maturing security capabilities and practises across all geographies and business units. As the Senior Director ...

Founding Security Engineer (Application & Infrastructure) Build the shield that makes Enterprise Superintelligence trustworthy London/Remote • Full-time • Pavo Labs About Pavo Pavo is building Enterprise Superintelligence: compounding systems that take ownership of business outcomes and work with humans to deliver them. We believe that while foundation models … document. Core Qualifications Experience: 5+ years of experience in Security Engineering, with a strong focus on Application Security and Cloud Security. AppSec Proficiency: Deep understanding of modern web vulnerabilities (CSRF, SSRF, XSS) and experience utilizing tools like Burp Suite, Semgrep, or CodeQL. Review code in Python ...

place). Working Pattern: 37.5 hours per week, Monday – Friday. Salary: £84,000 - £100,000 Benefits: Car allowance, Bupa, Matched pension contributions. Group Cyber Security Overview The Group Cyber Security (GCS) team is responsible for managing cyber risk appropriately across the Group and has recently refreshed its cyber … strategy, with a renewed focus on embedding cyber security as part of the culture and DNA. The Group operates a highly federated business model spanning 11 divisions and over 50 countries, and the cyber strategy has been designed to build materially improved security capabilities whilst working with ...

Sr. Sec & Compliance Engineer, AWS Security Assurance Services, LLC Job ID: 10455265 | AWS EMEA SARL (UK Branch) AWS Security Assurance Services (SAS) is hiring a Senior Security & Compliance Engineer to lead the design, deployment, and implementation of complex AWS security and compliance solutions that accomplish customer … defined business and security outcomes, solving for new levels of scale, complexity, and performance. You will build custom security controls, AI-enabled automation and tooling that translate security and compliance frameworks into secure-by-design implementations on AWS. You will innovate on behalf of AWS’s most ...