Application Security Engineer

b Overview /b p In this role you will strengthen the security of software across the engineering and DevSecOps lifecycle for a leading UK financial services organisation. You will perform secure code reviews, SAST/DAST scanning, vulnerability assessments, and embed security practices within CI/CD. The role includes pre-release manual pen-testing and threat modelling to mitigate risk. It is a hybrid position based in London, Manchester, or Glasgow, with in-office presence about once a week. A competitive salary and bonus potential accompany the opportunity to influence security across key applications. /p b Pay / Benefits /b ul li hybrid working model /li li bonus potential /li /ul b Responsibilities /b ul li Secure code reviews and SAST/DAST scanning /li li Vulnerability assessments and risk mitigation across CI/CD pipelines /li li Embed security practices throughout the CI/CD lifecycle /li li Pre-release manual penetration testing /li li Threat modelling and security design reviews /li /ul b Key requirements /b ul li Strong application security experience including OWASP Top 10 /li li Experience with Veracode or similar scanning tools /li li DevSecOps/CI-CD security practices /li li Cloud security experience across Azure and/or AWS /li li Kali Linux experience and manual penetration testing skills /li /ul ul li OWASP Top 10 /li li Veracode or similar scanning tools /li li SAST/DAST /li li DevSecOps/CI/CD /li li Cloud security (Azure and/or AWS) /li li Kali Linux /li /ul