At a Glance
- Tasks: Shape the future of motor insurance by securing applications and identifying vulnerabilities.
- Company: Join Prima, a leading online motor insurance provider with a passion for innovation.
- Benefits: Flexible work options, private healthcare, gym discounts, and tailored growth plans.
- Other info: Remote position available for candidates in Italy, Spain, or the UK.
- Why this job: Make a real impact in a dynamic team while working with cutting-edge security technologies.
- Qualifications: Strong knowledge of web/mobile security and hands-on experience with security tools.
The predicted salary is between 63000 - 77000 £ per year.
Are you looking for a new challenge?
Fancy helping us shape the future of motor insurance?
Prima could be the place for you.
Since 2015, we’ve been using our love of data and tech to rethink motor insurance and bring drivers a great experience at a great price.
Our story began in Italy, where we’ve quickly become the number one online motor insurance provider.
In fact, we’re trusted by over 5 million drivers.
And now we’re expanding to help millions more drivers in the UK and Spain.
To help fuel that growth, we need a Application Security Engineer to join our Security Engineering Team.
The Engineering Department is the beating heart of Prima.
You’ll be joining over 350 engineers across software development, infrastructure, operations and security: fueled by curiosity, experimentation and collaboration, you’ll help deliver scalable, impactful solutions that shape the future of insurance.
- What you’ll do
- Define security requirements and design application architectures following a secure-by-default approach.
- Conduct threat modeling, code reviews, and penetration testing on cloud-based web and mobile apps to proactively identify vulnerabilities.
- Implement, manage, and automate SAST/DAST/SCA security controls and WAF rules to enforce protection at scale.
- Partner with Product teams to ensure robust protection and foster a security-first development culture.
- Participate in the investigation, management, and resolution of security alerts.
- Collaborate on all core activities and initiatives of the Security Engineering team.
- What we’re looking for
- Strong knowledge of web/mobile security vulnerabilities, AI security risks, and industry standards (e. g., OWASP Top 10, CWE).
- Hands‑on experience with threat modeling frameworks (e. g., STRIDE), code reviews, penetration testing, and SAST/DAST/SCA tools.
- Proficiency in scripting/programming (e. g., Python, Rust) and experience with CI/CD systems and Infrastructure as Code (e. g., Pulumi).
- Availability for on‑call shifts to guarantee 24x7 security monitoring and support.
- Self‑motivated and proactive problem‑solvers with strong English communication skills and experience in Agile environments.
- Nice‑to‑have
- Practical experience with secure AWS design/implementation and Kubernetes (EKS) security.
- Hands‑on experience with WAF configurations (e. g., Cloudflare) and EDR, SIEM, or SOAR platforms.
- Relevant industry certifications (e. g., OSCP, OSWA/E, BSCP, PWPA/E, e WPT, or similar).
- Active involvement in security research, bug bounty programs, or CTF competitions.
- Why you’ll love it here
- Work Your Way: Enjoy full flexibility – work from home, the office or a mix of both. Plus, work from anywhere for up to 30 days a year.
- This is a full remote position and we're considering candidates located in Italy, Spain or UK.
- Grow with us: We may move fast at Prima, but we move together. Get access to learning resources, mentorship and a growth plan tailored to you.
- Thrive and perform: Your best work begins when you feel your best. Enjoy private healthcare, gym discounts, wellbeing programs and mental health support.
At Prima, we celebrate uniqueness.
If you don’t meet every requirement but are passionate about this role, we still want to hear from you.
Innovation thrives on diverse perspectives.
Prima is proud to be an equal opportunity employer. Need accommodations during the process? Email us at
Let’s build the future of insurance, together.
#J-18808-Ljbffr
Application Security Engineer employer: JobCubby
At Nearform, we pride ourselves on being an exceptional employer that fosters a collaborative and innovative work culture. As a Senior Golang Engineer, you will not only have the opportunity to work on high-impact projects with a global client portfolio but also benefit from continuous professional development and a supportive remote environment that values your contributions and growth.
StudySmarter Expert Advice🤫
We think this is how you could land Application Security Engineer
✨Join Local Tech Meetups
Get out there and mingle with fellow developers by joining local tech meetups. It’s a fantastic way to meet people who might be working at JobCubby or know someone who does. Plus, you can pick up some trendy tech skills and trends while you're at it!
✨Contribute to Open Source Projects
Show off your coding chops by jumping into open-source projects. Not only does this give you practical experience, but it also gets you noticed in the dev community. You'll create a killer portfolio that speaks volumes about your skills to JobCubby.
✨Tap into Online Developer Communities
Don’t underestimate the power of online developer communities like GitHub, Stack Overflow, and even Reddit. Participate in discussions, share your projects, and build your visibility. We can often find opportunities through these channels that can lead to a full-time gig at companies like JobCubby.
✨Explore Job Boards Specifically for Tech Roles
Keep your eyes peeled on job boards that focus on tech roles. Sites like TechCareers or Stack Overflow Jobs can often have listings for companies like JobCubby that might not show up on broader job sites. Make it a habit to check these regularly, and don’t hesitate to apply directly through our website!
We think you need these skills to ace Application Security Engineer
Some tips for your application 🫡
Show off your coding skills:When applying for a software engineering role, it's super important to showcase your coding skills. Make sure your CV includes your tech stack, any relevant programming languages you’re comfortable with, and examples of projects you've worked on. If you have a GitHub profile, link it up! We love to see code in action.
Tailor your portfolio:For a full-time role, we’d expect to see some solid examples of your work in your portfolio. Make sure to include at least two or three projects that highlight your problem-solving skills and your ability to work with different technologies. Focus on the projects that are most relevant to the position at JobCubby.
Craft a killer cover letter:Your cover letter is your chance to stand out—make it personal! Explain why you want to work at JobCubby and how your skills align with the role. Show us your passion for software development. We dig enthusiastic candidates who understand the value of collaboration and continuous learning!
Be clear and concise:When it comes to writing your CV and cover letter, clarity is key. Avoid jargon that could confuse us and stick to simple, direct language. Highlight your achievements with quantifiable results where possible, and keep everything easy to read. A well-organised application goes a long way!
How to prepare for a job interview at JobCubby
✨Brush Up on Your Coding Skills
For a full-time software engineering role, it's crucial that we stay sharp with our coding abilities. Expect technical questions that might involve solving problems on the spot or discussing algorithms. Practise on platforms like LeetCode or HackerRank to get comfortable with the types of questions that often come up.
✨Know Your Tools and Frameworks
Make sure we’re well-acquainted with the tools and technologies listed in the job description. Familiarise ourselves with any specific frameworks or programming languages mentioned. If JobCubby uses React or Node.js, for instance, be ready to discuss how we’ve used them in previous projects or coursework.
✨Showcase Your Projects
Bring along a portfolio that highlights our best work. This could be code samples, GitHub repositories, or any side projects we’ve built. Make sure we can talk through our thought process for each project, especially the challenges we faced and how we solved them—this shows our problem-solving skills in action.
✨Prepare for Behavioural Questions
While technical skills are key, full-time positions also require cultural fit. Be ready to discuss our previous experiences and how we handle teamwork, conflict, and deadlines. Brush up on the STAR method—Situation, Task, Action, Result—to clearly articulate our past experiences when discussing how we've contributed to a team.
