Application Security Engineer

TechOhana are partnered with a Global software business that are a leader in the niche they operate in.

The Role

As an Application Security Engineer, you’ll play a key role in ensuring secure-by-design principles are applied across web and API-driven applications.

Key responsibilities

• Performing application security reviews, threat modelling and secure design assessments
• Conducting SAST, DAST and dependency scanning across applications and services
• Identifying and remediating common vulnerabilities (OWASP Top 10, API security issues, authentication/authorisation flaws)
• Working with developers to improve secure coding practices and security awareness
• Supporting incident response and vulnerability management at the application layer
• Contributing to security standards, tooling and best practices across the SDLC

What We’re Looking For

• Proven experience in an Application Security or Product Security role
• Strong understanding of web application security and common attack vectors
• Hands-on experience with security tooling (e.g. Burp Suite, OWASP ZAP, Snyk, Checkmarx, Veracode or similar)
• Familiarity with modern development environments (APIs, microservices, cloud platforms)
• Ability to clearly communicate security risks to both technical and non-technical stakeholders
• Experience working in agile, software-led environments

Nice to Have

• Knowledge of cloud security (AWS, Azure or GCP)
• Familiarity with security frameworks such as OWASP, NIST or CIS
• Relevant security certifications (e.g. CSSLP, GWAPT, OSCP – not essential)