Application Security Engineer
Application Security Engineer
£70,000 - £85,000 + Bonus + Excellent Benefits Remote Working | Midlands Office (approx. 2 days per month) Candidates must be eligible to obtain SC Clearance
We are seeking an experienced Application Security Engineer to help embed security across the software development lifecycle and strengthen application security capabilities within a complex enterprise environment.
Working closely with Development, DevOps and Platform Engineering teams, you will drive secure-by-design principles, implement DevSecOps practices and ensure security controls are integrated throughout modern software delivery pipelines.
Key Responsibilities
- Embed security throughout the SDLC, from design through to deployment.
- Promote secure coding, security-by-design and shift-left security principles.
- Integrate and optimise security controls within CI/CD pipelines.
- Manage and enhance SAST, DAST, SCA and IAST capabilities.
- Configure, support and optimise Checkmarx and related application security tooling.
- Improve security testing, vulnerability management and remediation processes.
- Provide application security guidance to development and engineering teams.
- Support cloud-native, containerised and modern application environments.
- Contribute to application security standards, awareness and continuous improvement initiatives.
About the Role
This is a senior technical role offering significant autonomy and influence across the organisation's software engineering and cyber security functions. You'll act as a subject matter expert for application security, working closely with Development, Architecture, DevOps and Security teams to improve security maturity and reduce application risk.
Required Skills & Experience
- Experience in Application Security, DevSecOps or Security Engineering.
- Strong understanding of secure software development and application security best practice.
- Experience securing CI/CD pipelines and development environments.
- Hands-on experience with Checkmarx or similar security testing tools.
- Knowledge of SAST, DAST, SCA and vulnerability management.
- Understanding of cloud-hosted applications, containers and modern architectures.
- Familiarity with OWASP, ISO27001 and NCSC CAF frameworks.
- Strong stakeholder engagement and communication skills.
- Awareness of software supply chain threats, cloud security and emerging AI-related risks.
- Exposure to Prisma Cloud, Cortex or similar platforms would be advantageous.
What's on Offer?
- £70,000 - £85,000 salary
- Annual bonus
- Comprehensive benefits package
- Remote-first working model
- Exposure to modern DevSecOps and Application Security technologies
- Opportunity to shape application security practices across a large-scale enterprise environment