At a Glance
- Tasks: Conduct security reviews and provide guidance on Fortinet applications.
- Company: Join Fortinet, a leader in cybersecurity solutions.
- Benefits: Enjoy competitive salary, hybrid work, and extensive training opportunities.
- Other info: Be part of a global team with excellent career growth potential.
- Why this job: Make a real impact in securing digital environments with cutting-edge technology.
- Qualifications: 5+ years in information security and strong coding skills required.
The predicted salary is between 63000 - 77000 £ per year.
Senior Application Security Engineer Fortinet is looking for a Sr.
Application Security Engineer to join the Corporate Information Security team.
This is a highly technical role, with responsibilities conducting security reviews on various Fortinet applications, providing security education to our engineers and handling externally reported vulnerabilities.
Key
Responsibilities: Serve as an application security subject matter expert who provides guidance to internal teams Work closely with development teams, perform code reviews, penetration tests, and architectural reviews on existing codes and new features.
Develop, implement, and communicate vulnerability mitigation strategies to development teams Handle externally reported vulnerabilities as a member of Corporate Information Security Responsible Disclosure Program committee.
Drive Fortinet static and dynamic application security testing program.
Develop strategies, evaluate solutions, design and implement tools, processes and controls to ensure that security and privacy are designed in Fortinet applications Advise development teams on SDLC best practices.
Proactively research new attack vectors on applications that may affect Fortinet applications and infrastructure.
Be part of a global distributed team to share knowledge, workload and assignments.
Strong sense of teamwork is required.
Coach peers in application security concepts and best practices.
Required Skills/Experience:5+ years of work experience as an Information Security Researcher or Engineer3+ years of experience with manually auditing source code to find security issues or programming skills in one or more of: Java, .
NET, Python or Java Script frameworks.
Strong understanding on OWASP TOP 10 vulnerabilities.
Strong understanding of common API security risks Strong understanding on Cloud-Native application architecture, microservices, containerization technologies, secure deployment and implementation issues.
Proven experience in application penetration testing Proven experience in security code review Proven experience in application security testing (DAST, SAST, IAST, SCA) tools and processes Strong foundation in computer and network security, authentication & authorization, security protocols and applied cryptography Solid understanding with web security standards such as CSP, SOP, CORS, and emerging web security technologies.
Solid understanding on CI/CD pipelines, build systems and Dev Sec Ops principles.
Experience defining security architecture patterns and standards in a large enterprise organization.
Experience with cloud-based security solutions and familiarity with cloud service providers, particularly in relation to application security Experience working with threat modeling methodologies such as MITRE ATT&CK, STRIDE, PASTA etc.
Efficiency with web proxies such as Burp or OWASP ZAP or Fiddler Understanding of OAuth and JWT implementations.
Ability to organize & communicate effectively, both written and verbal, with technical and non-technical people across functional teams A BS degree in Computer Science, Cyber Security, other tech-related degree, or equivalent experience.
Experience in Cloud Security Posture Management (CSPM) and/or Application Security Posture Management (ASPM) tools is a plus.
Having OSWE OSCP, GWEB, GPEN or similar certificate is a plus Experience in Mobile Application Penetration Testing is a plus Familiarity with AI&ML & LLM concepts, AI Red Teaming, AI Guardrails is a plus.#LI-Hybrid Fortinet makes possible a digital world that we can always trust through its mission to protect people, devices, and data everywhere.
This is why the world's largest enterprises, service providers, and government organizations choose Fortinet to securely accelerate their digital journey.
The Fortinet Security Fabric platform delivers broad, integrated, and automated protections across the entire digital attack surface, securing critical devices, data, applications, and connections from the data center to the cloud to the home office.
Ranking #1 in the most security appliances shipped worldwide, more than 615,000 customers trust Fortinet to protect their businesses.
And the Fortinet NSE Training Institute, an initiative of Fortinet's Training Advancement Agenda (TAA), provides one of the largest and broadest training programs in the industry to make cyber training and new career opportunities available to everyone.
- Full time
- Posting Date: 2026-06-25
Senior Security Applications Engineer in London employer: Fortinet
Fortinet is an excellent employer for those looking to make a meaningful impact in the UK Public Sector, particularly within Local Government. With a strong focus on collaboration, diversity, and inclusion, employees are encouraged to grow their skills in a supportive environment while working on innovative cybersecurity solutions that enhance public services. The company also offers unique opportunities for professional development and engagement with cutting-edge technologies, making it a rewarding place to advance your career.
StudySmarter Expert Advice🤫
We think this is how you could land Senior Security Applications Engineer in London
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including Fortinet, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through Fortinet
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at Fortinet. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace Senior Security Applications Engineer in London
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at Fortinet insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to Fortinet that you’re committed to staying ahead in the game.
How to prepare for a job interview at Fortinet
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at Fortinet to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at Fortinet.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
