Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Lead application security initiatives and conduct thorough security reviews on Fortinet applications.
- Company: Join Fortinet, a leader in cybersecurity with a focus on innovation and teamwork.
- Benefits: Enjoy competitive pay, flexible work options, and opportunities for professional growth.
- Why this job: Make a real difference in securing applications while working with cutting-edge technologies.
- Qualifications: 5+ years in information security and strong coding skills in Java, .NET, Python, or JavaScript.
- Other info: Be part of a global team that values collaboration and continuous learning.
The predicted salary is between 36000 - 60000 £ per year.
Fortinet is looking for a Sr. Application Security Engineer to join the Corporate Information Security team. This is a highly technical role, with responsibilities conducting security reviews on various Fortinet applications, providing security education to our engineers and handling externally reported vulnerabilities.
Key Responsibilities:
- Serve as an application security subject matter expert who provides guidance to internal teams.
- Work closely with development teams, perform code reviews, penetration tests, and architectural reviews on existing codes and new features.
- Develop, implement, and communicate vulnerability mitigation strategies to development teams.
- Handle externally reported vulnerabilities as a member of Corporate Information Security Responsible Disclosure Program committee.
- Drive Fortinet static and dynamic application security testing program.
- Develop strategies, evaluate solutions, design and implement tools, processes and controls to ensure that security and privacy are designed in Fortinet applications.
- Advise development teams on SDLC best practices.
- Proactively research new attack vectors on applications that may affect Fortinet applications and infrastructure.
- Be part of a global distributed team to share knowledge, workload and assignments. Strong sense of teamwork is required.
- Coach peers in application security concepts and best practices.
Required Skills/Experience:
- 5+ years of work experience as an Information Security Researcher or Engineer.
- 3+ years of experience with manually auditing source code to find security issues or programming skills in one or more of: Java, .NET, Python or JavaScript frameworks.
- Strong understanding on OWASP TOP 10 vulnerabilities.
- Strong understanding of common API security risks.
- Strong understanding on Cloud-Native application architecture, microservices, containerization technologies, secure deployment and implementation issues.
- Proven experience in application penetration testing.
- Proven experience in security code review.
- Proven experience in application security testing (DAST, SAST, IAST, SCA) tools and processes.
- Strong foundation in computer and network security, authentication & authorization, security protocols and applied cryptography.
- Solid understanding with web security standards such as CSP, SOP, CORS, and emerging web security technologies.
- Solid understanding on CI/CD pipelines, build systems and DevSecOps principles.
- Experience defining security architecture patterns and standards in a large enterprise organization.
- Experience with cloud-based security solutions and familiarity with cloud service providers, particularly in relation to application security.
- Experience working with threat modeling methodologies such as MITRE ATT&CK, STRIDE, PASTA etc.
- Efficiency with web proxies such as Burp or OWASP ZAP or Fiddler.
- Understanding of OAuth and JWT implementations.
- Ability to organize & communicate effectively, both written and verbal, with technical and non-technical people across functional teams.
- A BS degree in Computer Science, Cyber Security, other tech-related degree, or equivalent experience.
- Experience in Cloud Security Posture Management (CSPM) and/or Application Security Posture Management (ASPM) tools is a plus.
- Having OSWE OSCP, GWEB, GPEN or similar certificate is a plus.
- Experience in Mobile Application Penetration Testing is a plus.
- Familiarity with AI&ML & LLM concepts, AI Red Teaming, AI Guardrails is a plus.
Senior Application Security Engineer in London employer: Fortinet
Contact Detail:
Fortinet Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Senior Application Security Engineer in London
✨Tip Number 1
Network like a pro! Attend industry meetups, webinars, or conferences related to application security. It's a great way to meet potential employers and get your name out there.
✨Tip Number 2
Show off your skills! Create a portfolio showcasing your projects, code reviews, or any penetration tests you've conducted. This gives hiring managers a taste of what you can do.
✨Tip Number 3
Prepare for interviews by brushing up on common application security scenarios. Be ready to discuss how you would handle vulnerabilities or improve security practices in real-world situations.
✨Tip Number 4
Don't forget to apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, we love seeing candidates who are proactive!
We think you need these skills to ace Senior Application Security Engineer in London
Some tips for your application 🫡
Tailor Your CV: Make sure your CV is tailored to the Senior Application Security Engineer role. Highlight your relevant experience, especially in application security and coding skills. We want to see how your background aligns with what we're looking for!
Craft a Compelling Cover Letter: Your cover letter is your chance to shine! Use it to explain why you're passionate about application security and how you can contribute to our team. Keep it engaging and make it personal – we love to see your personality come through!
Showcase Your Skills: Don’t just list your skills; demonstrate them! If you've worked with tools like Burp or OWASP ZAP, mention specific projects where you used them. We’re keen on seeing real-world applications of your expertise.
Apply Through Our Website: We encourage you to apply directly through our website. It’s the best way for us to receive your application and ensures you’re considered for the role. Plus, it makes the process smoother for everyone involved!
How to prepare for a job interview at Fortinet
✨Know Your Stuff
Make sure you brush up on your knowledge of OWASP TOP 10 vulnerabilities and common API security risks. Be ready to discuss how you've applied this knowledge in past roles, especially when it comes to code reviews and penetration testing.
✨Showcase Your Experience
Prepare specific examples from your 5+ years in the field that highlight your experience with application security testing tools like DAST, SAST, and IAST. Discuss any projects where you defined security architecture patterns or worked with cloud-based security solutions.
✨Communicate Clearly
Since you'll be working with both technical and non-technical teams, practice explaining complex security concepts in simple terms. This will show your ability to bridge the gap between different stakeholders and demonstrate your communication skills.
✨Be a Team Player
Fortinet values teamwork, so be prepared to discuss how you've collaborated with development teams in the past. Share examples of how you've coached peers in application security best practices and contributed to a positive team environment.