Application Security Jobs in the UK

201 to 225 of 305 Application Security Jobs in the UK

Product Security Engineer

City of London, London, United Kingdom
InfoSec People Ltd
Product Security Engineer (FinTech) London (4 days onsite) | £80,000 to £90,000 + Benefits Are you a Product Security Engineer looking to make a real impact? We are working with a fast-growing FinTech that is reshaping the payments landscape. You will collaborate with engineering teams to build security into products from day one, focusing on … architecture, threat modelling, and risk management. This is not a hands-off role. You will be the go-to advisor for product teams, helping them understand risk, make informed security decisions, and deliver innovative, secure solutions at scale. What you will do Conduct security assessments and drive a secure-by-design culture Collaborate with engineering teams on cloud … you will bring 3 to 5 years in Cyber Security, Product Security, or Secure Software Development Strong knowledge of GCP (primary), AWS, Azure Experience with threat modelling, AppSec, and security in CI/CD pipelines Ability to communicate security concepts clearly and balance risk with business priorities A collaborative, pragmatic approach Why join Shape security More ❯
Posted:

Product Security Engineer

London Area, United Kingdom
InfoSec People Ltd
Product Security Engineer (FinTech) London (4 days onsite) | £80,000 to £90,000 + Benefits Are you a Product Security Engineer looking to make a real impact? We are working with a fast-growing FinTech that is reshaping the payments landscape. You will collaborate with engineering teams to build security into products from day one, focusing on … architecture, threat modelling, and risk management. This is not a hands-off role. You will be the go-to advisor for product teams, helping them understand risk, make informed security decisions, and deliver innovative, secure solutions at scale. What you will do Conduct security assessments and drive a secure-by-design culture Collaborate with engineering teams on cloud … you will bring 3 to 5 years in Cyber Security, Product Security, or Secure Software Development Strong knowledge of GCP (primary), AWS, Azure Experience with threat modelling, AppSec, and security in CI/CD pipelines Ability to communicate security concepts clearly and balance risk with business priorities A collaborative, pragmatic approach Why join Shape security More ❯
Posted:

Offensive Security Specialist - Penetration Tester

London, United Kingdom
GCS
Role Summary: Join our dynamic Offensive Security Team! As we expand, we are looking for a Pentester/Red Teamer who is enthusiastic about undertaking a range of security assessments, including penetration testing, red team exercises, vulnerability scanning, and physical access evaluations for our clients. Key Responsibilities: Client Engagement Management: Lead client projects, ensuring clear communication, timely delivery … and exceeding expectations. Act as the primary liaison, providing updates and guidance. Security Assessment Execution: Conduct detailed security assessments, including penetration testing and vulnerability analysis. Systematically identify and document vulnerabilities across network, application, and physical layers. Prepare concise reports for both technical and non-technical stakeholders. Red Team Challenges: Participate in red team simulations, encompassing social engineering … writing custom scripts to automate tasks, analyze data, and develop unique tools for penetration testing. This skill is crucial for tailoring attacks, parsing data, and creating efficient workflows in security assessments. Linux/Windows Proficiency: Have a thorough understanding of Linux/Windows systems, which are commonly used in security environments. This includes navigating the command line, understanding More ❯
Employment Type: Permanent
Salary: £45000 - £55000/annum doe
Posted:

OT Security Engineer - Consultancy

England, United Kingdom
Hybrid / WFH Options
Hamilton Barnes Associates Limited
Are you ready to take the next step in your career as an OT Security Engineer? Join one of the world's leading IT services, consulting, and business solutions organization. Founded in 1968, the company consistently ranks among the top global IT service providers. With a presence in over 50 countries, the company has built a reputation for delivering … high-quality technology services across industries including banking, healthcare, telecommunications, and retail. The leading consultancy firm is looking for a skilled OT Security Engineer to play a critical role in safeguarding IT and operational technology environments, working closely with key stakeholders to mitigate risks and ensure compliance. Want to be part of a team that thrives in excellence and … shines? Feel free to reach out and apply today! Responsibilities: Identify and assess information security risks, ensuring mitigation strategies are in place across the business. Provide security guidance within governance processes to ensure IT solutions are secure and compliant. Collaborate with IT management teams to implement security best practices and appropriate technologies. Work proactively to address future More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

Head of Information Security

United Kingdom
Hybrid / WFH Options
watchTowr
We are watchTowr, a VC-backed cyber security startup helping organisations continuously discover vulnerabilities in their Internet-facing attack surface. Cyber security veterans and technical experts, we are obsessed with building cybersecurity technology to help prevent breaches. With experience informed by years of simulating sophisticated cyber attacks against some of the world's largest organisations, our mission is … We are in a high and aggressive growth phase of our journey, and are excited to continue adding colleagues to join our phorce of nature. Our vision for offensive security is continuous. But what's the role? We are looking for an ambitious colleague to join watchTowr as our first Head of Information Security to manage and continuously … evolve watchTowr's internal cyber security capability. As such, this is a hands-on role that will act as an individual-contributor in the initial stages. Although watchTowr's first dedicated internal Info Sec role, as a cyber security company, watchTowr has built a strong internal cyber security posture and culture since day zero, maintained by several More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

Senior Cloud Security Engineer

London, United Kingdom
Hybrid / WFH Options
Miro Group
Miro's Cloud Security team plays a critical role in ensuring the security, resilience, and integrity of Miro's platform infrastructure. We are entrusted with protecting both the foundational information assets and the collaborative experiences that enable our global customers to innovate with confidence. Operating as part of the broader Infrastructure organization, the Cloud Security team partners … closely with key engineering groups including Networking, Compute, and Observability to embed security deeply across Miro's cloud environment. The team also maintains strong alignment with our peers in the Security organization-such as Application Security and Detection & Response-ensuring a unified and strategic approach to securing our platform. At Miro, we are on a path … to achieving an industry-leading security posture. This ambition is reflected in our proactive governance frameworks, robust assurance and certification programs, and a long-term strategy anchored in automation, scalability, and risk-informed decision-making. About the Role Seeking a Senior Cloud Security Engineer to join our Cloud Security team. Your cloud and automation skills, combined with More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

Application Development Analyst (Senior) - SQL Server & .NET

London, United Kingdom
Hybrid / WFH Options
Michael Page (UK)
Our Client The client is a global provider of insurance. Job Description Our organization is seeking a talented individual to join our 2nd Line Support team as a Senior Application Support Analyst , based in our London City office. Reporting to the Application Support Lead, this role is pivotal in providing comprehensive support for all business applications within our … IT portfolio. Key responsibilities include assisting end users with application-related issues, monitoring applications, performing proactive and reactive maintenance, and driving continuous service improvements. As a customer-facing role, it demands a collaborative team player with a proactive approach to learning and a commitment to delivering timely solutions to complex challenges. Strong communication skills are essential, as you will … Ticket Analysis to identify recurring issues and propose permanent solutions Identification and proposal of automation opportunities in support activities Attending weekly CAB, presenting changes to be implemented by the Application Support team Ensuring housekeeping and maintenance tasks are completed on time Ensuring SLAs (Service Level Agreements) are met. Knowledge Management Ensuring knowledge is spread across the team and removing More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

Security engineer REF 885

Leeds, Yorkshire, United Kingdom
Interface Recruitment UK
Pension/23 days holidays (Buy and sell 5)/Life Assurance Additional Benefits: Free Parking Region: West Yorkshire Description Job Title: Infrastructure/IT Security specialist - Enterprise client (major O365 and security projects on a global scale) Salary: up to £65,000 + Education Requirements: none but degree preferred or commercial exposure Experience Requirements: 5 plus years … any accepted but ideally professional services Qualifications: none Work Hours: 37.5 hours Skills: Excellent knowledge of Windows Servers, Active Directory, Email Platforms, Anti - Virus Systems, Networking, Networking protocols & Networking Security, VM etc Extensive knowledge in IP networks and multi - platform server environments. Experience with the maintenance of Exchange 2013, SQL Server, Symantec Enterprise Protection, Backup Exec. Understanding of ITIL … planned 3rd line work requests. To manage such items through to resolution or escalate them to another member of the team or the Infrastructure Manager. Work to ensure the security of data and IT systems and educating staff on good and secure working practices. Work with leaders and stakeholders within the business to ensure that the integration of newly More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

DevOps Specialist

Royal Leamington Spa, England, United Kingdom
Hybrid / WFH Options
Tata Consultancy Services
If you need support in completing the application or if you require a different format of this document, please get in touch with at UKI.recruitment@tcs.com or call TCS London Office number 02031552100/+44 204 520 2575 with the subject line: “Application Support Request”. Role: Senior DevSecOps Developer Job Type : Permanent Location: Leamington/Gaydon, Hybrid … products are free from security vulnerabilities throughout their lifecycle. Key responsibilities Drive initiatives to automate security processes and reduce toil on development teams. Identify and optimise background AppSec and Vulnerability tasks to free up team capability. Review all Application Security (AppSec) tools and ensure their suitability, identifying alternative tools where required. Build monitoring and dash-boarding … Key experience: Experience of working in Hashicorp vault is very important. Some experience of at least one major cloud provider (GCP, AWS, Azure). Experience of automated and manual AppSec testing practices and principles. Knowledge of common application and infrastructure security vulnerabilities and mitigations. Experience in configuring and operating security vulnerability tooling covering areas such as static More ❯
Posted:

Senior C++/Rust Software Engineer

Belfast, Northern Ireland, United Kingdom
Black Duck
Black Duck Software, Inc. helps organizations build secure, high-quality software, minimizing risks while maximizing speed and productivity. Black Duck, a recognized pioneer in application security, provides SAST, SCA, and DAST solutions that enable teams to quickly find and fix vulnerabilities and defects in proprietary code, open source components, and application behavior. With a combination of industry … leading tools, services, and expertise, only Black Duck helps organizations maximize security and quality in DevSecOps and throughout the software development life cycle. The Static Analysis team is looking for an exceptional developer, with experience or interest in building and deploying security tools, to join the Static Analysis team at Black Duck. The job involves evolving our state … Additionally, you will ensure the product operates in a scalable and performant manner within a cloud-based environment. The perfect candidate will have a strong passion for improving software security and quality, a background in static analysis or compilers, and enthusiasm about programming languages. Responsibilities Design and develop code analysis software for large scale cloud deployments Make improvements to More ❯
Posted:

Senior CyberArk Consultant

Hatfield, Hertfordshire, South East, United Kingdom
COMPUTACENTER (UK) LIMITED
Life on the team At Computacenter, youll be part of a highly skilled Security Consultancy team, working with enterprise customers to design and deliver cutting-edge security solutions. Whether youre leading engagements or collaborating with fellow experts, youll be trusted to advise on complex, business-critical projects across cloud, datacentre, network, identity, and application security. We offer … a dynamic, supportive environment where your expertise is valued, your ideas are heard, and your professional development is a priority. What you'll do As a Security Consultant, youll play a pivotal role in securing some of the most complex IT environments. You'll work closely with customers to design, implement, and advise on a broad range of security … with business needs. Your responsibilities will include: Leading or contributing to enterprise-level CyberArk project design and delivery engagements Acting as a trusted Subject Matter Expert (SME) for Identity Security and broader security domains Delivering consulting services such as security assessments, workshops, and gap analysis Producing high-quality documentation and outcome-based deliverables Building strong relationships with More ❯
Employment Type: Permanent
Posted:

Senior Analyst, Cybersecurity Operations (Detection & Response)

London, United Kingdom
McDonald's Corporation
meets fast-paced innovation. Learn more via the McDonald's Global Technology Technical Blog . Job Description: We are seeking a Senior Analyst to oversee daily operations within the Security Operations program, reporting to the Senior Manager of Security Operations. Responsibilities include managing security personnel, enforcing policies, promoting security awareness, and leading initiatives on Global Cyber … Security (GCS) defensive measures and incident response. You will support daily security operations and incident response processes, responding to crises to mitigate cyber threats, employing mitigation, preparedness, response, and recovery strategies. You will work within the Incident Response team, coordinating with other Cyber Operations teams to identify, report, and remediate security incidents, including triaging events, analyzing networks … containment, eradication, recovery, lessons learned). They should adhere to established incident response procedures, possess strong attention to detail, and collaborate effectively across global teams. Requirements include: Experience in security operations or incident response Solid background in defensive measures and analyzing network events Proven ability to lead resolution during security crises Proficiency in networking concepts, protocols, and security More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

AppSec Champion / DevSecOps Security SME

England, United Kingdom
Hybrid / WFH Options
ManpowerGroup
Job Title: AppSec Champion/DevSecOps Security SME Contract Duration: 3-6 months Location: Fully Remote Contract Type: Umbrella only Clearance: Eligible for SC or Active SC About Us: We manage over £200 billion on behalf of the UK government and serve 25 million customers. As one of the UK’s largest retail savings organisations, security is central … to everything we do. Role Overview: We are seeking an experienced DevSecOps Security SME to join our technology team on a contract basis. In this pivotal role, you will drive the adoption of secure software development practices, integrate security controls into our CI/CD pipelines, and lead application and infrastructure security efforts within a complex … and highly regulated environment. Key Responsibilities: Champion application security best practices across development teams. Embed security into continuous integration and continuous deployment (CI/CD) pipelines, ensuring automated security testing and compliance. Collaborate with developers, engineers, and security teams to identify and remediate vulnerabilities early in the development lifecycle. Lead cyber assurance initiatives, maintaining security More ❯
Posted:

AppSec Champion / DevSecOps Security SME

Nationwide, United Kingdom
Hybrid / WFH Options
Experis
Job Title: AppSec Champion/DevSecOps Security SME Contract Duration: 3-6 months Location: Fully Remote Contract Type: Umbrella only Clearance: Eligible for SC or Active SC About Us: We manage over £200 billion on behalf of the UK government and serve 25 million customers. As one of the UK's largest retail savings organisations, security is central … to everything we do. Role Overview: We are seeking an experienced DevSecOps Security SME to join our technology team on a contract basis. In this pivotal role, you will drive the adoption of secure software development practices, integrate security controls into our CI/CD pipelines, and lead application and infrastructure security efforts within a complex … and highly regulated environment. Key Responsibilities: Champion application security best practices across development teams. Embed security into continuous integration and continuous deployment (CI/CD) pipelines, ensuring automated security testing and compliance. Collaborate with developers, engineers, and security teams to identify and remediate vulnerabilities early in the development lifecycle. Lead cyber assurance initiatives, maintaining security More ❯
Employment Type: Contract
Posted:

Platform Operations Support Engineer

London, United Kingdom
Talon Outdoor
Some of the common tasks involve creating a login for internal and external users, troubleshooting issues, answering user queries, training the Media owners when requested, testing and deploying an application, raising bugs and defects with the developers, and keeping the application data up-to-date. You'll spend your time ensuring that users are updated regarding their tickets … is complete. Completing weekly and monthly tasks. Keeping documentation up-to-date and sending out comms if there are issues. WHAT WE'RE LOOKING FOR_ Proven experience in an application support role or similar technical position. Familiarity with Agile and DevOps methodologies. Proficiency in using DevOps tools like AWS, Terraform, and Docker in production environments. Experience with continuous integration … skills. Proficiency in at least one scripting or object-oriented programming language. Experience with SQL scripting and database servers such as SQL Server and MongoDB. Familiarity with internet-based application security practices. Proficiency in configuration management, automation, and orchestration tools. Experience in the media domain is advantageous. Knowledge of APIs and microservices is desirable. Experience working with Java More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

Solutions Architect

London, United Kingdom
JFrog Ltd
Experience in building relationships with champions and senior stakeholders within enterprise accounts Proven experience in Docker, Kubernetes, CI/CD, git integrations and build tools Hands-on experience with AppSec tools (part or all) such as: SCA/SAST/SBOM Management/Container Security Ability to build software pipelines with various DevOps tools Hands-on experience with cloud More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

Software Engineering

Birmingham, Staffordshire, United Kingdom
Hybrid / WFH Options
Goldman Sachs Bank AG
Java, Spring and interaction with MongoDB. It requires the candidate to be familiar with distributed services, testing, system monitoring and reporting, and the complete SDLC process. Any experience in application security will be preferred. This role offers the opportunity to work with a best-in-class team of engineers building the next generation onboarding platform for PWM business. … a medical advocacy service for employees and family members facing critical health situations, and counseling and referral services through the Employee Assistance Program (EAP). We provide Global Medical, Security and Travel Assistance and a Workplace Ergonomics Program. We also offer state-of-the-art on-site health centers in certain offices. Fitness To encourage employees to live a More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

Asset & Wealth Management - Birmingham - Associate / Vice President - Software Engineering

Birmingham, Staffordshire, United Kingdom
WeAreTechWomen
Java, Spring and interaction with MongoDB. It requires the candidate to be familiar with distributed services, testing, system monitoring and reporting, and the complete SDLC process. Any experience in application security will be preferred. This role offers the opportunity to work with a best-in-class team of engineers building the next generation onboarding platform for PWM business. More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

Application Security Engineer

London Area, United Kingdom
Hybrid / WFH Options
InfoSec People Ltd
The role is hybrid 1 day a week in their London Office. The Specialist Application Security Engineer will play a pivotal role in ensuring the integrity and security of our applications across various platforms. You will lead the charge in implementing robust security measures, collaborating closely with cross-functional teams to fortify our defenses against cyber … threats. KEY ACCOUNTABILITIES & RESPONSIBILITIES Focused on application security initiatives across cloud and on-premises environments, employing a diverse suite of tools including Semgrep for SAST, Snyk for SCA, GHAS for secret scanning, Burp Suite for DAST, and python for automation. Forge partnerships with external vendors to optimize and seamlessly integrate security tools into our application security workflow, ensuring comprehensive coverage and operational efficiency. Drive the seamless integration of application security processes into development pipelines, leveraging Azure DevOps (ADO), GitHub Actions, and similar tools for streamlined automation. Actively contribute to the formulation and enforcement of application security policies and procedures, utilizing advanced tool capabilities to mitigate risks effectively. Engage with internal stakeholders More ❯
Posted:

Application Security Engineer

City of London, London, United Kingdom
Hybrid / WFH Options
InfoSec People Ltd
The role is hybrid 1 day a week in their London Office. The Specialist Application Security Engineer will play a pivotal role in ensuring the integrity and security of our applications across various platforms. You will lead the charge in implementing robust security measures, collaborating closely with cross-functional teams to fortify our defenses against cyber … threats. KEY ACCOUNTABILITIES & RESPONSIBILITIES Focused on application security initiatives across cloud and on-premises environments, employing a diverse suite of tools including Semgrep for SAST, Snyk for SCA, GHAS for secret scanning, Burp Suite for DAST, and python for automation. Forge partnerships with external vendors to optimize and seamlessly integrate security tools into our application security workflow, ensuring comprehensive coverage and operational efficiency. Drive the seamless integration of application security processes into development pipelines, leveraging Azure DevOps (ADO), GitHub Actions, and similar tools for streamlined automation. Actively contribute to the formulation and enforcement of application security policies and procedures, utilizing advanced tool capabilities to mitigate risks effectively. Engage with internal stakeholders More ❯
Posted:

Principal Technical Program Manager – Application Security

United Kingdom
Hybrid / WFH Options
Oracle
development, operating systems or software development, and their intersection with software assurance needs. Who are we? The Oracle Software Assurance organization is a world-class team of high caliber application security researchers, analysts, software engineers and site reliability engineers who thrive on new challenges. We are an inclusive and diverse team with a full spectrum of experience distributed … of a start-up, working on a critical greenfield software assurance project collaboratively with our cloud and mobile engineering teams. The Software Assurance organization has the mission to make application security and software assurance, at scale, a reality. We are a dedicated team, leveraging each other’s insights and abilities to produce cutting edge solutions to difficult problems … role, it is required that you have a strong technical background. You will have demonstrated examples of working closely with technical and operational teams such as software developers, researchers, security analysts, SREs, Data scientists and mobile engineering teams, having a background in software assurance is highly desirable. A strong drive, sense of ownership and ability to work autonomously is More ❯
Posted:

Security Engineer, Incident Response , AWS Corporate Security

London, United Kingdom
Amazon
Security Engineer, Incident Response , AWS Corporate Security Job ID: Amazon Corporate Services Pty Ltd AWS is looking for a passionate Security Engineer, Incident Response who can lead the response to security issues across the largest cloud provider in the world. You must thrive in high-pressure situations, and think like both an attacker and defender, while … working through the entire incident response lifecycle. You'll be working in a global team environment where clear and accurate communication, documentation, and collaboration on security issues is critical. In this role you'll be conducting security monitoring and response activities for the Amazon internal network. We value broad and deep technical knowledge, specifically in the fields of … operating system security, network security, cryptography, software security, malware analysis, forensics, security operations, incident response, detection and hunting, and emergent security intelligence. We don't expect you to be an expert in all of the domains mentioned, but we do expect you to be excited to learn about them! BASIC QUALIFICATIONS - BS degree in Computer More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:

Cloud Security Platform Lead

London Area, United Kingdom
Zebra People | B Corp™
Cloud & Security Platform Lead A well-known British motoring company are looking for a Cloud & Security Platform Lead to join them in what is a brand new position for the company. There’s a lot of scope here for you to have a real impact on their cloud platform. Joining a team of 10, you’d be responsible … for leading the strategy (and setting standards across the department) behind their cloud and security technology, with a focus on working with AWS, which is their cloud provider of choice. What’s in it for me? You’ll get a salary of up to £100K for the role as well as a wide range of benefits. These include an … native application development and microservices architecture. Security is a key aspect of the role, covering both hands-on implementation and compliance. The focus will primarily be on AppSec, encompassing principles and practices such as firewalls, intrusion detection and prevention systems, encryption, and endpoint protection. On the compliance access you’ll need an understanding of security standards and More ❯
Posted:

Cloud Security Platform Lead

City of London, London, United Kingdom
Zebra People | B Corp™
Cloud & Security Platform Lead A well-known British motoring company are looking for a Cloud & Security Platform Lead to join them in what is a brand new position for the company. There’s a lot of scope here for you to have a real impact on their cloud platform. Joining a team of 10, you’d be responsible … for leading the strategy (and setting standards across the department) behind their cloud and security technology, with a focus on working with AWS, which is their cloud provider of choice. What’s in it for me? You’ll get a salary of up to £100K for the role as well as a wide range of benefits. These include an … native application development and microservices architecture. Security is a key aspect of the role, covering both hands-on implementation and compliance. The focus will primarily be on AppSec, encompassing principles and practices such as firewalls, intrusion detection and prevention systems, encryption, and endpoint protection. On the compliance access you’ll need an understanding of security standards and More ❯
Posted:

Security Engineer, Incident Response, SIRT

London, United Kingdom
Amazon
Security Engineer, Incident Response, SIRT Job ID: Amazon Support Services Pty Ltd Amazon is looking for a qualified Security Engineer to join our innovative, high energy Security Incident Response Team (SIRT) in Sydney. SIRT Security Engineers respond to security events, conduct analysis of threats and intrusion attempts, and provide security services to safeguard highly … sensitive data. They work hands-on with detection systems and vulnerability analysis tools to respond to potential threats to Amazon systems. Security Engineers are unique individuals prepared to relentlessly resolve security issues by gathering and analyzing event data and conducting root-cause analysis. With your technical expertise, you will be solving security challenges at scale, working to … protect the applications powering the most sophisticated e-commerce platform ever built. We value broad and deep technical knowledge, specifically in the fields of forensics, malware analysis, network security, application security, cryptography, and security intelligence. Key job responsibilities - Responding to security incidents, and coordinating a cohesive response involving multiple teams across Amazon. - Providing security More ❯
Employment Type: Permanent
Salary: GBP Annual
Posted:
Application Security
10th Percentile
£52,269
25th Percentile
£60,625
Median
£75,000
75th Percentile
£105,000
90th Percentile
£137,500