Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Support and enhance application security testing using cutting-edge tools and techniques.
- Company: Join a leading tech firm focused on secure development practices.
- Benefits: Competitive salary, flexible working options, and opportunities for professional growth.
- Why this job: Make a real impact by securing applications and collaborating with innovative teams.
- Qualifications: Experience in application security and familiarity with coding languages required.
- Other info: Dynamic work environment with strong focus on career advancement.
The predicted salary is between 36000 - 60000 £ per year.
Key Responsibilities
- Support and enhance the organisation's application security testing programme, leveraging approved enterprise tools for SAST, SCA, DAST, API security assessment, and penetration testing activities.
- Conduct manual analysis and security review activities across web, API, and internal applications to validate automated findings and uncover additional weaknesses.
- Triage, verify, and risk-rank vulnerabilities, partnering with engineering and application teams to ensure findings are accurately understood and remediation actions are practical and prioritised.
- Monitor and drive remediation progress, tracking closure of vulnerabilities and supporting engineering teams with root-cause analysis to reduce repeat issues.
- Contribute to secure development practices, helping to maintain secure coding standards, patterns, and reusable security controls or guardrails.
- Operate and optimise AppSec tooling within CI/CD workflows, supporting the organisation's DevSecOps journey and enabling early, automated detection of security issues.
- Provide hands-on guidance to developers, helping teams understand vulnerabilities, adopt secure patterns, and deliver applications that meet required security standards.
- Maintain comprehensive application security metrics, dashboards, and reports, ensuring technical and non-technical stakeholders have clear visibility of risk, progress, and governance alignment.
Performance Objectives
- Effectively run the application security toolset (SAST, SCA, DAST, API testing) within established SDLC and CI/CD processes, ensuring vulnerabilities are accurately identified, triaged, and communicated to engineering teams.
- Strengthen collaboration with development teams, providing high-quality remediation guidance and driving a measurable reduction in recurring application security weaknesses.
- Deliver clear, actionable AppSec reporting, maintaining dashboards and metrics that support governance, risk visibility, and informed decision-making for technical and leadership stakeholders.
Skills and Experience
Essential
- Hands-on experience in Application Security, DevSecOps, or security engineering, preferably within a large or complex technical environment.
- Practical experience deploying, tuning, and operating SAST, SCA, DAST, and API security tools as part of a structured AppSec programme.
- Strong understanding of secure coding fundamentals and common software weaknesses, including the OWASP Top 10 and MITRE CWE Top 25.
- Demonstrated experience triaging, validating, and prioritising vulnerabilities, working directly with software engineers to support remediation.
- Ability to read and interpret code in at least one common programming language (e.g., C#, JavaScript, Python).
- Knowledge of CI/CD pipelines and the integration of security tooling into developer workflows (e.g., GitHub Actions, Azure DevOps).
- Strong understanding of authentication and authorisation, including OAuth, OIDC, SSO, and role-based access control principles.
- Experience producing and maintaining security metrics, dashboards, or reporting to support governance and visibility.
Desirable
- Experience automating or contributing to DevSecOps tooling and pipelines, including scripting (e.g., Python, Bash).
- Knowledge of software supply chain security, dependency management practices, and artefact repositories (e.g., Artifactory).
- Exposure to cloud-native and containerised environments, including AWS/Azure, Kubernetes, microservices, and API-centric architectures.
Application Security Analyst in City of London employer: Hays
Contact Detail:
Hays Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Application Security Analyst in City of London
✨Tip Number 1
Network like a pro! Reach out to folks in the industry, attend meetups, and connect with people on LinkedIn. You never know who might have the inside scoop on job openings or can refer you directly.
✨Tip Number 2
Show off your skills! Create a portfolio showcasing your application security projects or contributions. This could be anything from code snippets to detailed case studies of vulnerabilities you've tackled.
✨Tip Number 3
Prepare for interviews by brushing up on common application security scenarios. Be ready to discuss how you’ve triaged vulnerabilities or collaborated with engineering teams in the past. Practice makes perfect!
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, we love seeing candidates who are proactive about their job search.
We think you need these skills to ace Application Security Analyst in City of London
Some tips for your application 🫡
Tailor Your CV: Make sure your CV is tailored to the Application Security Analyst role. Highlight your hands-on experience with SAST, DAST, and secure coding practices. We want to see how your skills match up with what we're looking for!
Show Off Your Projects: If you've worked on any relevant projects, don’t hold back! Share examples where you’ve triaged vulnerabilities or contributed to DevSecOps tooling. This gives us a real insight into your practical experience.
Be Clear and Concise: When writing your application, keep it clear and to the point. Use bullet points for key achievements and make sure we can easily see your qualifications. We appreciate straightforward communication!
Apply Through Our Website: Don’t forget to apply through our website! It’s the best way for us to receive your application and ensures you’re considered for the role. We can’t wait to hear from you!
How to prepare for a job interview at Hays
✨Know Your Tools Inside Out
Make sure you’re familiar with the application security tools mentioned in the job description, like SAST, DAST, and API security assessment tools. Be ready to discuss your hands-on experience with these tools and how you've used them in past roles.
✨Understand Secure Coding Practices
Brush up on secure coding fundamentals and the OWASP Top 10 vulnerabilities. You might be asked to explain how you would guide developers in avoiding these common pitfalls, so having practical examples ready will show you know your stuff.
✨Show Your Collaboration Skills
This role emphasises working closely with engineering teams. Prepare to share examples of how you've successfully partnered with developers in the past to triage vulnerabilities and drive remediation efforts. Highlighting your communication skills will be key!
✨Metrics Matter
Be prepared to discuss how you’ve maintained security metrics and dashboards in previous roles. This shows you understand the importance of visibility and governance in application security, which is crucial for this position.
