Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Design and implement robust security solutions for modern application architectures.
- Company: Join a leading UK retail bank focused on secure transformation.
- Benefits: Competitive salary, flexible working options, and opportunities for professional growth.
- Why this job: Make a real impact on security architecture in a high-profile transformation programme.
- Qualifications: Experience in application security, strong communication skills, and technical leadership.
- Other info: Collaborative environment with a focus on innovation and career development.
The predicted salary is between 36000 - 60000 ÂŁ per year.
We are seeking an experienced Security Design Engineer to join an existing team on a high‑profile transformation programme. This role is ideal for someone with expertise in application architecture, application security, and network security, particularly in the protection and segmentation of application components. You will be responsible for security design, ensuring alignment with enterprise strategy, architectural standards, and regulatory obligations. This is a hands‑on role requiring strong technical credibility, exceptional communication skills, and the ability to influence stakeholders across technology and security functions.
Key Responsibilities
- Deliver high‑quality security design documentation aligned to functional/non-functional requirements and enterprise architecture.
- Produce and maintain high-level designs, architecture patterns, decision records, risk logs, and design deviations.
- Ensure all solutions are architected to provide robust protection of application components, with strong consideration for network segmentation, micro‑segmentation, and secure communication flows.
- Drive secure‑by‑design principles and provide expert consultation to engineering squads and programme teams.
- Publish and present reference architectures and technical solutions to design authorities and senior stakeholders.
Governance
- Champion architectural governance across reference architectures, HLDs, patterns, and architectural decisions.
- Present technical artefacts for approval at technical and security design authorities.
- Ensure appropriate peer review and documentation quality control.
Risk & Dependency Management
- Identify, track, and communicate technical risks, design issues, and dependencies.
- Provide clear, actionable remediation strategies.
- Map design decisions to residual risks and articulate business/technical trade‑offs.
Cybersecurity & Application Security
- Hands‑on experience securing modern application architectures (microservices, containerised/K8s environments, cloud‑native systems).
- Strong background in application security testing (AST) including SAST, DAST, IAST, MAST, and container/K8s scanning.
- Expertise with Software Composition Analysis (SCA) tools and supply‑chain security.
- Skilled in building and optimising CI/CD‑integrated security pipelines (GitHub Actions, GitLab, Jenkins, Azure DevOps, etc.).
- Strong threat‑modelling capability and deep understanding of secure SDLC.
- Ability to evaluate, design, and integrate enterprise AppSec platforms including SCA/AST tooling, SBOM solutions, and vulnerability workflows.
- Experience guiding engineering teams through vulnerability remediation and secure coding best practices.
- Familiarity with industry frameworks such as OWASP SAMM, ASVS, CSA, NIST SSDF, SLSA.
What We’re Looking For
- A confident communicator capable of presenting deep technical content to both engineers and senior leadership.
- Someone who brings strong documentation discipline and architectural rigour.
- A collaborator with broad IT knowledge and the ability to work effectively with non‑security SMEs.
- A technical leader who can represent Cyber Services at governance boards and design authorities.
- Experience in both operational and transformation security environments is highly desirable.
Why Apply for This Role?
This is an opportunity to influence and shape security architecture across one of the UK’s largest retail banks. Working on major strategic programmes, you’ll have a significant platform to contribute technical leadership, improve enterprise security posture, and enable secure transformation at scale.
Security Engineer - Application Security employer: I-confidential
Contact Detail:
I-confidential Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Security Engineer - Application Security
✨Tip Number 1
Network, network, network! Get out there and connect with people in the industry. Attend meetups, webinars, or even local tech events. You never know who might have a lead on your dream job!
✨Tip Number 2
Show off your skills! Create a portfolio showcasing your projects, especially those related to application security and architecture. This will give potential employers a taste of what you can do and set you apart from the crowd.
✨Tip Number 3
Prepare for interviews by brushing up on your technical knowledge and soft skills. Practice explaining complex concepts in simple terms, as you'll need to communicate effectively with both engineers and senior leadership.
✨Tip Number 4
Don't forget to apply through our website! We love seeing candidates who are genuinely interested in joining our team. Plus, it gives you a better chance to stand out in the application process.
We think you need these skills to ace Security Engineer - Application Security
Some tips for your application 🫡
Tailor Your Application: Make sure to customise your CV and cover letter to highlight your experience in application security and architecture. We want to see how your skills align with the role, so don’t hold back on showcasing relevant projects!
Showcase Your Technical Skills: When detailing your experience, focus on your hands-on skills with modern application architectures and security tools. We love seeing specific examples of how you've implemented secure coding practices or managed vulnerabilities in past roles.
Communicate Clearly: Since this role involves presenting technical content to various stakeholders, make sure your written application reflects your communication skills. Use clear, concise language and avoid jargon where possible to ensure your message is understood.
Apply Through Our Website: We encourage you to submit your application through our website for the best chance of being noticed. It’s the easiest way for us to keep track of your application and get back to you quickly!
How to prepare for a job interview at I-confidential
✨Know Your Stuff
Make sure you brush up on your application security knowledge, especially around microservices and containerised environments. Be ready to discuss specific tools like SAST, DAST, and CI/CD security pipelines, as these will likely come up in conversation.
✨Showcase Your Communication Skills
Since this role requires presenting technical content to both engineers and senior leadership, practice explaining complex concepts in simple terms. Use examples from your past experiences to demonstrate how you've effectively communicated with different stakeholders.
✨Prepare for Scenario Questions
Expect questions that ask you to identify risks or design issues in hypothetical scenarios. Think about how you would approach risk management and remediation strategies, and be prepared to articulate your thought process clearly.
✨Demonstrate Collaboration
This role involves working closely with various teams, so be ready to share examples of how you've successfully collaborated in the past. Highlight your ability to work with non-security SMEs and how you’ve influenced decisions in a team setting.
