At a Glance
- Tasks: Own application security for web, mobile, and cloud platforms throughout the development lifecycle.
- Company: Join a forward-thinking tech company prioritising security in modern applications.
- Benefits: Attractive salary, flexible working options, and opportunities for professional growth.
- Other info: Collaborative environment with a focus on secure-by-design culture.
- Why this job: Make a real difference by embedding security into innovative engineering teams.
- Qualifications: Expertise in application security and hands-on experience with security testing tools.
The predicted salary is between 60000 - 80000 £ per year.
AppSec Security SME required to take ownership of application security across modern web, mobile, and cloud-native platforms - working across the full SDLC to embed security into engineering teams and translate technical risk into business impact.
Responsibilities
- Assess and mitigate security risks across web, mobile, and cloud-native applications throughout the development lifecycle
- Design and secure APIs (REST, GraphQL), including authentication, authorisation, and threat modelling
- Conduct security testing using SAST, DAST, IAST tooling and manual penetration testing
- Define and enforce security policies, standards, and governance frameworks
- Collaborate with development, architecture, and DevOps teams to embed security into agile workflows
- Champion secure-by-design culture and influence stakeholders at all levels
Skills
- Strong application security expertise, including OWASP Top 10, web, mobile (iOS/Android), and API security
- Hands-on experience with security testing tools and manual penetration testing techniques
- Cloud security experience, Azure preferred
- Clear communicator able to drive secure-by-design adoption across engineering teams
We think you need these skills to ace Senior Application Security Engineer - SME in London
Application Security Expertise
OWASP Top 10
Web Security
Mobile Security (iOS/Android)
API Security
Security Testing Tools
Manual Penetration Testing
