About KX
KX software powers the time-aware data-driven decisions that enable fast-moving companies to outpace competitors, realizing the full potential of their AI investments. The KX platform delivers transformational value by addressing data challenges related to completeness, timeliness and efficiency, ensuring companies understand change over time and can achieve faster, more accurate insights at any scale, cost-effectively.
KX is essential to the operations of the world's top investment banks, aerospace and defence, high-tech manufacturing, healthcare and life sciences, automotive and fleet telematics organizations. The company has established offices and a robust customer base across North America, Europe, and Asia Pacific.
Role Overview
KX Systems is looking for an Application Security Engineer to work directly with development teams and embed security into the way code gets written, tested, and shipped. This role owns the technical side of product security: finding vulnerabilities before they reach production, building the tooling that catches them automatically, and giving developers the guidance they need to fix issues without slowing delivery down.
You'll be the technical bridge between the security function and engineering, working inside the SDLC rather than auditing it from outside.
Location & Workplace Type
Hybrid working model based out of our Belfast or Newry office.
Skills
- Hands-on experience in application security, with real code review and vulnerability remediation work, not just tool operation.
- Working knowledge of common vulnerability classes (OWASP Top 10, injection, auth flaws, SSRF, deserialisation, etc.) and how to explain and fix them to developers.
- Experience with SAST/DAST/SCA tooling in a CI/CD context, and the judgement to tune it so findings stay actionable rather than noise.
- Ability to read and reason about code in Java, Python, C++, or C#, with working proficiency in at least one and enough familiarity with the others to review and discuss findings.
- Threat modelling experience, or a clear grasp of the method even without a formal certification.
- Comfortable working as an embedded technical partner to developers, not as a gatekeeper.
- Familiarity with secure API design and cloud-native application patterns.
- Experience supporting compliance frameworks (ISO 27001, SOC 2) is a plus, not a prerequisite.
Core Technologies
Java, Python, C++, C#, SAST/DAST/SCA tooling (e.g. SonarQube, Snyk), CI/CD pipelines, secure coding standards, threat modelling, OWASP Top 10, API security, software supply chain security, vulnerability management.
Application Security Engineer in London employer: Kx
KX is an exceptional employer that fosters a dynamic work culture, encouraging innovation and collaboration within its Finance team. With a focus on employee growth, KX offers ample opportunities for professional development while ensuring a supportive environment for its leaders to thrive. Located in a vibrant area, the company provides unique advantages such as flexible working arrangements and a commitment to work-life balance, making it an ideal place for those seeking meaningful and rewarding employment.
