Application Security Engineer (12-Month Fixed Term Contract) in Livingston

Job Description \n Application Security Engineer (12-Month Fixed Term Contract) \n Help Build Security into Products That Matter \n We're looking for an experienced Application Security Engineer to join our Security Engineering team on a 12-month fixed-term contract. \n This isn't a role where security sits on the side-lines. You'll be Embedded in product delivery, working directly with engineers, architects and product teams to ensure security is considered from the earliest design conversations through to deployment and beyond. You'll combine technical expertise with practical problem-solving, helping teams build secure solutions without slowing innovation. \n If you enjoy collaborating with developers, influencing technical decisions, and turning security challenges into workable solutions, we'd love to hear from you. \n What You'll Be Doing \n As the dedicated Application Security Engineer for a portfolio of customer-facing and digital products, you'll be trusted to: \n \n Partner with product and engineering teams to understand systems, data flows, users and business priorities. \n Review solution designs and facilitate threat modelling workshops, helping teams identify risks before they become problems. \n Provide practical, real-world guidance on secure architecture and development across applications, APIs, cloud services and integrations. \n Help teams embed security into their development pipelines through automation, tooling and security-by-design practices. \n Investigate, triage and prioritise vulnerabilities, translating technical findings into clear actions for development teams. \n Coordinate penetration testing activities and support teams through remediation and re-testing. \n Assess the security of SaaS platforms, third-party technologies and external integrations. \n Work closely with Security Operations, Identity & Access Management and Cloud Security colleagues where risks cross functional boundaries. \n Represent security interests within technical governance forums, providing balanced advice and escalating significant risks when required. \n Contribute to evolving security standards, secure development practices and application security maturity across the organisation. \n Maintain clear records of decisions, risks and recommendations, ensuring a smooth handover at the end of the contract. \n \n About You \n You're someone who enjoys solving problems, building relationships and making security relevant and actionable. \n You understand that the best security professionals don't just identify risks, they help teams address them in practical ways. \n You'll have experience across areas such as: \n \n Secure by Design principles \n Threat modelling \n Application security testing \n Vulnerability management \n Security risk assessment \n Secure software development practices \n \n Experience with technologies such as Java/Spring Boot, React, Node.js, Snowflake, Salesforce, Kubernetes/OpenShift, Snyk or Wiz would be beneficial, but we're equally interested in candidates who have gained relevant experience across different technology stacks and tooling. \n What We're Looking For \n You'll likely have: \n \n Experience working in Application Security, Product Security or Secure Software Engineering. \n A strong understanding of common application and API security risks, including authentication, authorisation, data protection and security misconfiguration. \n Experience reviewing architectures and facilitating threat modelling workshops using STRIDE or similar methodologies. \n Hands-on experience with security testing practices and tools, including SAST, software composition analysis, secrets detection, API security testing and infrastructure or container scanning. \n The ability to assess vulnerabilities through both a technical and business lens, helping teams focus on what matters most. \n Familiarity with modern engineering environments, including cloud platforms, CI/CD pipelines and containerised applications. \n Strong communication and stakeholder management skills, with the confidence to challenge constructively and influence decision-making at all levels. \n \n Who You'll Be Working With \n You'll be joining a collaborative and supportive Security Engineering function made up of specialists in: \n \n Application Security \n Penetration Testing \n Red Teaming \n Cloud Security Engineering \n Secure SDLC \n DevSecOps and CI/CD Security \n Software Development \n \n You'll also build strong relationships with architects, engineers, product managers and delivery teams across the business, helping create security solutions that work in the real world. \n Why Join Us? \n This is an opportunity to make a genuine impact. You'll have the autonomy to shape security outcomes, influence product decisions and work with teams that value security as an enabler rather than a blocker. \n If you're passionate about secure