Senior Application Security Engineer (198811)

This is an opportunity to join a forward-thinking technology-driven business where security is embedded from day one. You will play a key role in shaping how products are built securely, working closely with engineering teams to influence design decisions and protect innovative, customer-facing solutions. The role offers strong technical ownership, exposure to modern cloud and AI-driven systems, and the chance to make a visible impact across the organisation.

The Company: They are a modern digital financial services organisation focused on delivering user-centric products through technology and innovation. With a strong emphasis on collaboration and continuous improvement, they have built a culture where teams are empowered to challenge conventions and deliver meaningful change. Security is treated as a core pillar of product development, not an afterthought. As part of a growing InfoSec function, you will join a team that values practical, engineering-led security approaches.

The Role:

• Embed security into the full product lifecycle, from concept through to release
• Conduct hands-on security assessments across web, mobile, and backend applications
• Lead and support threat modelling activities for new features and systems
• Collaborate closely with engineering teams to design secure architectures
• Integrate and optimise security tooling such as SAST, SCA, DAST and vulnerability scanning
• Deliver secure engineering training and guidance to developers
• Support triage and remediation of vulnerabilities from testing, tooling, and external reports
• Contribute to automation of security processes using scripts and internal tools

Your Skills & Experience:

• Strong commercial experience in application or product security
• Hands-on experience with security testing tools such as Burp Suite, Nmap, or similar
• Solid knowledge of web or mobile security, with willingness to broaden across both
• Good understanding of networking fundamentals and operating systems
• Experience conducting threat modelling and explaining security trade-offs to stakeholders
• Knowledge of secure coding practices and common vulnerabilities
• Familiarity with cloud environments and infrastructure concepts
• Comfortable working closely with engineers in a collaborative environment

What They Offer:

• Opportunity to work on modern technology including cloud and AI-driven systems
• A highly collaborative environment with strong engineering partnerships
• Clear progression opportunities within a growing security function
• Investment in learning and development, including time for upskilling