1 to 25 of 96 Application Security Jobs in the UK excluding London

Application Security Engineer Bristol - 3 days a week on site £90,000 + great benefits An impressive financial services business is looking to hire an Application Security Engineer to support this team with the risk and remediation activities. This business is going through a big technology transformation programme that is estimated to take 3 -5 years. … The successful Application Security Engineer will be part of this journey and have great technical exposure and the ability to rapidly progress. Working closely in one of transformation projects, the successful Application Security Engineer will work closely with the wider security and technology teams to define the strategy and roadmap of technology changes moving forward. … Application Security Engineer Duties and Responsibilities The successful Application Security Engineer will: Provide security input into solution design to ensure that security principles are incorporated at both the platform and software level Automate tooling to run security fixes over a variety of repo's Ensure that security requirement input is provided across More ❯

Application Security Engineer Bristol or Edinburgh - minimum of 3 days per week on site. £90,000 + great benefits An impressive financial services business is looking to hire an Application Security Engineer to support this team with the risk and remediation activities. This business is going through a big technology transformation programme that is estimated to … take 3 -5 years. The successful Application Security Engineer will be part of this journey and have great technical exposure and the ability to rapidly progress. Working closely in one of transformation projects, the successful Application Security Engineer will work closely with the wider security and technology teams to define the strategy and roadmap of … technology changes moving forward. Application Security Engineer Duties and Responsibilities The successful Application Security Engineer will: Provide security input into solution design to ensure that security principles are incorporated at both the platform and software level Automate tooling to run security fixes over a variety of repo's Ensure that security requirement More ❯

Application Security Engineer Bristol or Edinburgh - minimum of 3 days per week on site. £90,000 + great benefits An impressive financial services business is looking to hire an Application Security Engineer to support this team with the risk and remediation activities. This business is going through a big technology transformation programme that is estimated to … take 3 -5 years. The successful Application Security Engineer will be part of this journey and have great technical exposure and the ability to rapidly progress. Working closely in one of transformation projects, the successful Application Security Engineer will work closely with the wider security and technology teams to define the strategy and roadmap of … technology changes moving forward. Application Security Engineer Duties and Responsibilities The successful Application Security Engineer will: Provide security input into solution design to ensure that security principles are incorporated at both the platform and software level Automate tooling to run security fixes over a variety of repo's Ensure that security requirement More ❯

Senior Application Security Engineer Location: Hybrid working or homeworking with view to attend office occasionally Salary: £60,000 – £70,000 per annum Bonus: Discretionary bonus of up to 10% Are you passionate about securing modern applications and cloud environments? We’re looking for a Senior Application Security Engineer to join my client's growing team and … play a key role in shaping the security posture of our organisation. About the Role As a Senior Application Security Engineer, you’ll bring deep expertise in application security testing, cloud security, and secure development practices. You’ll work closely with IT, development, and project teams to embed security into every stage of … the software development lifecycle and drive a risk-based approach to vulnerability management. Key Responsibilities Lead application security initiatives across cloud-native and enterprise environments. Promote secure design principles, threat modelling, and best practices across teams. Own and evolve the technical vulnerability management programme. Implement and support security controls, particularly within Azure cloud environments. Evaluate and deploy More ❯

Enterprise Security Architect page is loaded Enterprise Security Architectlocations: Manchester: Bristol Harbourside: Leeds Wellington Placetime type: Full timeposted on: Posted Todaytime left to apply: End Date: November 26, 2025 (14 days left to apply)job requisition id: 135879 End Date Tuesday 25 November 2025 Salary Range £90,440 - £106,400 Flexible Working Options Hybrid Working, Job Share Job … Description Summary . Job Description JOB TITLE: Enterprise Security Architect SALARY: £90,440 - £106,400 LOCATION(S): Bristol, Manchester, Leeds, or Edinburgh HOURS: Full time WORKING PATTERN: Hybrid, 40% (or two days) in an office site About this opportunity We're looking for passionate and forward-thinking Enterprise Security Architects who can combine deep technical thought leadership with … strong security knowledge & skills to help drive the Group's Security Architecture forward. We have a role open to be responsible for the Application Security domain. Application Security at Lloyds Banking Group includes Application Development Security, Application Security Testing, Release Management, Application Operation Protection, Mobile Application Protection, and More ❯

We are looking for an experienced Application security specialist to join our Cyber team with a hyper focus on supporting our application security architecture and risk management programme. You will help us build out a world class capability to align with our key stakeholders in the Games teams to provide a clear plan, review and support … lifecycle and overall risk remediation. This is a hybrid role : Location: Cambridge, UK with travel to the office once per week. What you'll be doing: Provide guidance on security best practices and compliance and undertake security testing Identify Application security risks and requirements for new projects and system developments Represent cyber in review sprints on … application security prior to live implementation Collaborate with the architecture and development teams to review the design and code for security vulnerabilities Establish a threat modelling capability and evangelise secure coding in the development lifecycle Provide technical specialist advice to ensure that security standards are understood and can be complied with Develop security testing plans More ❯

Application Security Lead Entertainment UK Hybrid/Remote Job description This role works closely with development teams to verify our partners applications satisfy the defined security criteria, supporting the organization on the security design and conducting reviews of applications, while improving automation. Primary Responsibilities: Provide technical leadership and guidance on application security best practices … methodologies, and technologies. The ideal candidate will serve as a trusted advisor to development teams, architects, and stakeholders across our clients organisation. Design and review security architectures for applications, ensuring the implementation of effective security controls and countermeasures. Conduct threat modelling exercises to identify potential security risks and vulnerabilities early in the development lifecycle. Conduct in-depth … security assessments, code reviews, and penetration testing of applications to identify and mitigate security vulnerabilities. Utilise industry-standard tools and methodologies to assess the security posture of applications and provide actionable recommendations for remediation Essential At least three years experience in a similar senior Information Security position Customer-oriented person, with the ability to educate and More ❯

Now Hiring: Head of Security Engineering – Application Security & Testing 📍 Location: Welwyn Garden City or London, UK Are you ready to lead the charge in securing one of the UK’s largest technology estates? Tesco Technology is looking for a visionary Head of Security Engineering – Application Security & Testing to join our dynamic Cyber function. This … is a high-impact leadership role where you’ll shape the future of security assurance across our platforms and products. You’ll lead a talented team of engineers and architects, driving innovation in vulnerability management, application security, and adversarial testing. This is a pivotal cyber leadership role within Tesco Technology, shaping how we secure our platforms and … products. You’ll be at the forefront of driving innovation in security engineering, ensuring Tesco remains resilient against evolving threats while enabling safe and secure technology delivery. 🔍 What You’ll Be Doing: Lead & Inspire : Manage three Security Engineering Managers and their teams (20+ engineers), plus a Principal Security Engineer/Architect. Drive Innovation : Oversee cutting-edge security More ❯

Application Security Specialist (DevOps) Hybrid – Cambridge, UK (1 day a week in office) We’re looking for an experienced Application Security Specialist to join a growing cyber security team and play a key role in shaping a world-class application security programme. This role will give you the chance to work closely with … engineering and development teams, embedding security into the development lifecycle, driving automation, and influencing remediation plans that have real impact. What you’ll be doing Guiding teams on security best practices, compliance, and secure coding. Collaborating with architects and developers to review designs and code for vulnerabilities. Embedding/improving threat modelling and secure development practices into the … SDLC. Designing and integrating security testing plans. Performing and overseeing application security testing and driving remediation. Managing end-to-end vulnerability workflows, including bug bounty findings. Supporting incident response activities when needed. Monitoring and reporting on application security metrics, KPIs, and emerging threats. Automating processes for vulnerability detection and integrating tools into the pipeline. Note More ❯

INFORMATION SECURITY SPECIALIST KEY POINTS * Hybrid working model (Stoke-on-Trent) - up to £55,000 p/a* Focus on application security, code analysis, threat modelling and penetration testing* Work closely with Software Development teams across a large technical environment* Opportunity to influence secure development practices and automation initiatives ABOUT THE CLIENT We're supporting a respected … and technology-driven organisation that continues to strengthen its security posture across a broad portfolio of applications. They are looking to appoint an Information Security Specialist to join their established Application Security team, contributing to secure development practices, code assurance, and vulnerability identification across complex systems. THE BENEFITS * Hybrid working and flexible approach* Exposure to enterprise … consent for us to process and submit (subject to required skills) your application to our client in conjunction with this vacancy only. KEY SKILLS Application Security, AppSec, OWASP, Threat Modelling, Secure Development Lifecycle, Code Review, DAST, SAST, CI/CD, Penetration Testing, Supply Chain Security, Risk Assessment, Software Security, Automation More ❯

Job Title: Senior Application Security EngineerSalary: £70,000Location: Reading/remote About the Organisation Join a fast-growing UK technology and consulting firm that's investing heavily in cutting-edge cyber security. With a strong focus on innovation, collaboration, and professional development, this company empowers its people to shape the future of secure digital transformation across a wide … be part of a business that values expertise, agility, and doing the right thing - where everyone has the opportunity to make a genuine impact. About the Role The Senior Application Security Engineer will play a key role in protecting the organisation's infrastructure, cloud platforms, and applications. Working within a highly technical and collaborative cyber team - supported by … a 24/7 external SOC - you'll research, test, and implement next-generation security solutions to safeguard data and systems. This role offers the chance to lead on application and cloud security initiatives, influence secure design standards, and mentor colleagues in best practices. Key Responsibilities Lead application and cloud security initiatives, ensuring systems and More ❯

Job Title: Senior Application Security Engineer Salary: £70,000 Location: Reading/remote About the Organisation Join a fast-growing UK technology and consulting firm that's investing heavily in cutting-edge cyber security. With a strong focus on innovation, collaboration, and professional development, this company empowers its people to shape the future of secure digital transformation across … be part of a business that values expertise, agility, and doing the right thing - where everyone has the opportunity to make a genuine impact. About the Role The Senior Application Security Engineer will play a key role in protecting the organisation's infrastructure, cloud platforms, and applications. Working within a highly technical and collaborative cyber team - supported by … a 24/7 external SOC - you'll research, test, and implement next-generation security solutions to safeguard data and systems. This role offers the chance to lead on application and cloud security initiatives, influence secure design standards, and mentor colleagues in best practices. Key Responsibilities Lead application and cloud security initiatives, ensuring systems and More ❯

Senior Technical Consultant UK based Company Description We are looking for an experienced UK based Senior Security Consultant to strengthen the consulting team at this well established security consultancy. Role Description This is a full-time, on-site role based in Portsmouth and potential work-from home for a Cyber Security Consultant. The consultant will conduct vulnerability … assessments, application security reviews, and network security analyses. Responsibilities include evaluating risks, providing actionable security recommendations, and assisting clients with compliance to established standards like ISO 27001 and PCI DSS. The role will involve working closely with clients across sectors to strengthen their overall security posture through proactive planning and solutions. Qualifications Experience in Cybersecurity … including identifying and addressing security threats and challenges Knowledge of Application Security, with the ability to identify vulnerabilities in web and mobile applications Skills in Network Security, including securing and evaluating infrastructure and cloud environments Expertise in performing Vulnerability Assessments and delivering actionable insights Background in Information Security, with experience in regulatory compliance (e.g., PCI More ❯

Join us at Barclays as an Application Security Engineering Lead, where you'll design and deliver tools that help developers build secure software from the start. Your work will enhance security across the bank, protecting critical systems and sensitive information. To be successful as an Application Security Engineering Lead , you should have experience with: Advanced … knowledge of application security testing methodologies (SAST, DAST, IAST, SCA). Experience with cloud security architectures, DevSecOps integration and pipelines. Advanced knowledge of security principles and guardrails. Coding proficiency in at least 1 major language. Some Other Highly Valued Skills May Include Proven ability to build and scale application security programs from the ground … up. Cross-functional collaboration skills with development, operations, and product teams Vendor management and security tool evaluation expertise. You may be assessed on the key critical skills relevant for success in role, such as risk and controls, change and transformation, business acumen strategic thinking and digital and technology, as well as job-specific technical skills. This role is based More ❯

Your new role - Permanent - ON SITE 5 Days per week. You will be required to obtain security clearance and undergo vigorous onboarding checks - UK Only. Sponsorship NOT available.The main purpose of this job mainly focusses on information security, cybersecurity, and data security, including a wide scope, such as physical security of computer rooms, operating system level … security of Windows and Linux, network security of firewall and other security devices, application security both development and testing phrases, terminal security, backup security, third party and supply chain security of IT service provider.Liaison with the Head Office, Security Operation Centre or Data Centre for implementing security policies, projects and … security controls. Work with Internal Audit and other departments to execute penetration tests, cybersecurity risk self-assessment, ensure best practice and international baseline standards are in place and in line with local regulations.The ideal candidate will be responsible for managing information security systems, ensuring compliance with regulatory requirements, and conducting thorough security audits.You will be part of More ❯

Application Security Engineer Salary - £70-75k + 10% Bonus + Benefits Location – Cambridge (1 day per week) Newly created Application Security Engineer role with a Major Tech organization undergoing a really exciting security transformation to a truly cloud-native infrastructure estate. Working alongside the wider Engineering departments, you’ll be responsible for championing the … Secure Development Lifecycle across the wider Engineering departments, ensuring security and privacy are built in and incorporated to everything at the design stage; leading in the integration of SAST tooling into the pipeline and secure developer training, as well as developing security architecture design patterns and standards. This is a crucial hire where they need someone who can … blend a very hands-on, technical security engineering skill-set in AWS, with the ability to collaborate and work with wider departments and senior stakeholders to translate technical security concepts into their language. Responsibilities Perform hands-on security threat modelling of new technology and applications, ensuring everything is secure and in-line with in-house security More ❯

Job Title: Information Security Architect - Solutions & Enterprise Security Architecture Location: Manchester Hybrid Working: 50% Remote/50% Office Leading Financial Services/FinTech are seeking a highly technical and broad Information Security Architect to join their security architecture team. This is a key position responsible for ensuring that the design, delivery, and operation of systems and … services meet the highest security architecture and compliance standards. Information Security Architect will provide architectural leadership across multiple security domains — combining deep hands-on technical security expertise with strategic enterprise security architecture thinking. You will play a critical role in embedding security throughout the technology landscape, from solution-level security reviews to security solutions and enterprise-wide security architecture standards. This role requires a balance of security solution architecture, technical review and assurance, and enterprise security architecture skills. You will define and validate security controls, assess new technologies, perform security design reviews, and ensure security-by-design principles are consistently applied across hybrid, on-premise, and More ❯

Mobile Application Security Engineer Rate: £650 per day Inside IR35 Duration: 6 months Location: Bristol/Hybrid (onsite once a month) We have an exciting opportunity for a Mobile Application Security Engineer to join a leading organisation on a contract basis. You'll play a key role in strengthening the security of large-scale mobile … applications, working across both iOS and Android platforms. Partnering with engineering and cyber security teams, you'll embed and enhance mobile security throughout the development lifecycle shaping tooling strategy, driving automation and promoting a 'Secure by Design' culture. Key Responsibilities Design and implement automated mobile security testing and vulnerability scanning within the mobile SDLC. Define and deliver … the mobile app security tooling and technology strategy. Run proof of concepts for new tools and integrate them into CI/CD pipelines. Roll out, optimise and measure the effectiveness of mobile security tooling. Triage vulnerabilities, identify false positives and provide remediation and risk guidance. Build strong partnerships with engineering and security stakeholders. Implement and maintain a More ❯

Information Security Engineer – Nationwide Software Company – Worthing, West Sussex (Office based) – 50K to 55K plus excellent benefits Stratospherec is recruiting for an Information Security Engineer to be based in the West Sussex office of our client who is a leading software company. In this role you will use your Information Security Engineer/Analyst expertise both supporting … and enhancing this nationwide company’s cybersecurity posture through the securing of enterprise applications, data and infrastructure and by identifying, assessing, and mitigating security risks. This is a hands-on, predominantly office-based role requiring experience in application and data security, vulnerability assessments, security administration, threat monitoring and response. You will work alongside a multidisciplinary team … of infrastructure, support staff and developers, cross-functionally supporting colleagues from across the business and the wider IT team to ensure security requirements are met and outstanding service delivered. KEY ACTIVITIES • Key activities in relation to application security will include performing security reviews of application architecture, source code, and third-party integrations. • Collaborating with development More ❯

Job Title: Mobile Security Engineer (Contract) Location: Bristol (Hybrid – 2 days onsite per week) Contract Length: 6 months Day Rate: £450/day (Inside IR35) Overview We are looking for an experienced Mobile Security Engineer to join a large-scale financial services programme. You’ll play a key role in strengthening mobile application security, reviewing security posture, implementing best practices, and contributing to the development of secure mobile tooling. Key Responsibilities Perform regular reviews and assessments of mobile application security posture. Conduct hands-on mobile platform security testing, threat modelling, and implementing mitigation strategies. Develop and maintain mobile-focused penetration testing tools, scripts, policies, and procedures. Ensure alignment with mobile app security standards across Android and iOS environments. Essential Skills & Experience Proven experience in mobile security engineering. Strong knowledge of mobile platform security, threat modelling, and mitigation frameworks. Hands-on experience conducting mobile application security assessments. In-depth understanding of Android/iOS mobile security standards. Ability to develop or customise security tools for mobile More ❯

Permanent Based in Milton Keynes £50,000 pa - £60,000 pa Information Security Officer Hybrid Our client are a leading provider of software solutions for student accommodation, event management, catering, and residential services, they help institutions streamline operations, elevate customer experiences, and unlock their full potential.With over 25 years of experience and trusted by more than 350 institutions worldwide … your impact is real. If you're ready to help shape the future of operational technology in education and events, we'd love to meet you. An experienced Information Security Officer to lead security strategy, operations, and compliance. This is a hands-on role combining strategic security architecture with operational security management and regulatory compliance oversight. … The successful candidate will define security standards across our product portfolio, manage security environments, and serve as our central point for ISO27001, PCI/DSS, and GDPR compliance while supporting commercial teams with tender responses and client security assurance. Core Responsibilities: Strategic (30%) Define technical security architecture and standards across multi-cloud SaaS platforms Embed security More ❯

Permanent Based in Milton Keynes £50,000 pa - £60,000 pa Information Security Officer Hybrid Our client are a leading provider of software solutions for student accommodation, event management, catering, and residential services, they help institutions streamline operations, elevate customer experiences, and unlock their full potential. With over 25 years of experience and trusted by more than 350 institutions … your impact is real. If you're ready to help shape the future of operational technology in education and events, we'd love to meet you. An experienced Information Security Officer to lead security strategy, operations, and compliance. This is a hands-on role combining strategic security architecture with operational security management and regulatory compliance oversight. … The successful candidate will define security standards across our product portfolio, manage security environments, and serve as our central point for ISO27001, PCI/DSS, and GDPR compliance while supporting commercial teams with tender responses and client security assurance. Core Responsibilities: Strategic (30%) Define technical security architecture and standards across multi-cloud SaaS platforms Embed security More ❯

About the Role A leading UK digital transformation consultancy consistently recognised as a Times Top 100 Company to Work For is seeking a Cybersecurity Architect to join its growing security practice. This is a fully remote role (UK-based), working on high-impact programmes across public and private sector clients. Youll play a key role in designing secure cloud … and application architectures, advising on best practices, and embedding security into digital platforms from discovery through to delivery. Key Responsibilities Design secure cloud architectures across AWS/Azure/GCP for enterprise-scale transformation projects Define and implement application security standards including threat modelling, secure SDLC, API security and DevSecOps practices Conduct security risk … assessments, architecture reviews and produce high-level and low-level security designs Advise engineering and product teams on identity, encryption, zero trust, network security and data protection approaches Work alongside client CISOs, architects and delivery teams, providing strategic security guidance Support bid work, proposals and shaping of security solutions for new client engagements Stay current with More ❯

Project Description: We are looking for a Cyber Security Team Leader who brings broad, hands-on security expertise and strong leadership capability to our Cyber Security function. The successful candidate will act as a senior analyst within the team while also providing direction, coordination, and mentorship to colleagues. You must have experience across the core Cyber Security domains, including TVM, SIEM, EDR, Incident Response, DLP, EASM, Cloud Security, Application Security, WAF, and User Access Management, along with a strong understanding of industry frameworks such as NIST and CIS . This role is primarily remote; however, regular attendance at our Farnborough office is required (typically once per week, usually Thursdays) for in-person collaboration. … Responsibilities: Lead the development and implementation of Application Code Security and User Access Management capabilities within the team. Establish these services by adopting or adapting DXC security models where feasible, or by designing and deploying new approaches within Luxoft. Support and contribute to the wider Cyber Security services delivered by the team, including TVM, SIEM, EDR More ❯

Project Description: We are looking for a Cyber Security Team Leader who brings broad, hands-on security expertise and strong leadership capability to our Cyber Security function. The successful candidate will act as a senior analyst within the team while also providing direction, coordination, and mentorship to colleagues. You must have experience across the core Cyber Security domains, including TVM, SIEM, EDR, Incident Response, DLP, EASM, Cloud Security, Application Security, WAF, and User Access Management, along with a strong understanding of industry frameworks such as NIST and CIS . This role is primarily remote; however, regular attendance at our Farnborough office is required (typically once per week, usually Thursdays) for in-person collaboration. … Responsibilities: Lead the development and implementation of Application Code Security and User Access Management capabilities within the team. Establish these services by adopting or adapting DXC security models where feasible, or by designing and deploying new approaches within Luxoft. Support and contribute to the wider Cyber Security services delivered by the team, including TVM, SIEM, EDR More ❯