Application Security Engineer (12-Month Fixed Term Contract)
Help Build Security into Products That Matter
We're looking for an experienced Application Security Engineer to join our Security Engineering team on a 12-month fixed-term contract.
This isn't a role where security sits on the side-lines. You'll be Embedded in product delivery, working directly with engineers, architects and product teams to ensure security is considered from the earliest design conversations through to deployment and beyond. You'll combine technical expertise with practical problem-solving, helping teams build secure solutions without slowing innovation.
If you enjoy collaborating with developers, influencing technical decisions, and turning security challenges into workable solutions, we'd love to hear from you.
What You'll Be Doing
As the dedicated Application Security Engineer for a portfolio of customer-facing and digital products, you'll be trusted to:
Partner with product and engineering teams to understand systems, data flows, users and business priorities.
Review solution designs and facilitate threat modelling workshops, helping teams identify risks before they become problems.
Provide practical, real-world guidance on secure architecture and development across applications, APIs, cloud services and integrations.
Help teams embed security into their development pipelines through automation, tooling and security-by-design practices.
Investigate, triage and prioritise vulnerabilities, translating technical findings into clear actions for development teams.
Coordinate penetration testing activities and support teams through remediation and re-testing.
Assess the security of SaaS platforms, third-party technologies and external integrations.
Work closely with Security Operations, Identity & Access Management and Cloud Security colleagues where risks cross functional boundaries.
Represent security interests within technical governance forums, providing balanced advice and escalating significant risks when required.
Contribute to evolving security standards, secure development practices and application security maturity across the organisation.
Maintain clear records of decisions, risks and recommendations, ensuring a smooth handover at the end of the contract.
About Yo...
Application Security Engineer (12-Month Fixed Term Contract) employer: Spencer Rose Ltd
As a leading financial services organisation based in the heart of the City of London, we pride ourselves on fostering a dynamic and inclusive work culture that champions innovation and collaboration. Our commitment to employee growth is reflected in our robust training programmes and opportunities for career advancement, ensuring that our team members are equipped to thrive in a rapidly evolving industry. With a hybrid working model, we offer the flexibility to balance professional and personal commitments while being part of transformative projects that shape the future of data architecture.
