Application Security Engineer (.NET / Azure / DevSecOps)
Location: Newcastle upon Tyne | Hybrid (3 Days Office / 2 Days Home)
Salary: Competitive, depending on experience
Type: Full-time, Permanent
Overview
An established UK financial services organisation is looking to appoint an Application Security Engineer to join its Cyber Security function.
This is a hands-on technical security role focused on embedding security throughout the software development lifecycle across a substantial Microsoft Azure and .NET application environment.
You’ll work closely with software developers, engineering teams and security specialists to identify vulnerabilities, improve secure coding practices and ensure applications are designed, developed and maintained with security at their core.
The position would particularly suit someone with a strong application security background who enjoys working directly with development teams, understands modern software engineering practices and wants to influence how security is implemented across enterprise applications.
Key Responsibilities
- Embed application security controls throughout the software development lifecycle
- Conduct secure design reviews across .NET applications, APIs and cloud services
- Perform static and dynamic application security testing (SAST and DAST) and software composition analysis (SCA)
- Identify, assess and support remediation of application vulnerabilities
- Integrate security tooling and automated checks into Azure DevOps CI/CD pipelines
- Define and improve secure coding standards aligned with OWASP best practices
- Conduct threat modelling and security assessments for critical applications
- Review Azure security configurations, including identity management and Azure Key Vault
- Develop and improve application security monitoring using Microsoft Defender and Sentinel
- Work with development teams to improve secure coding practices, vulnerability management and DevSecOps maturity
Requirements
- Commercial experience securing applications hosted within Microsoft Azure
- Strong understanding of application security principles and OWASP Top 10 vulnerabilities
- Experience working with .NET technologies, including C#, ASP.NET and APIs
- Experience with SAST, DAST and software composition analysis tools
- Understanding of Azure DevOps, CI/CD pipelines and security automation
- Knowledge of authentication and identity technologies, including OAuth2, OpenID Connect and Microsoft Entra ID
- Experience identifying, assessing and remediating application vulnerabilities
- Strong communication skills and the ability to work closely with software engineering teams
- Experience with SonarQube or Tenable
- Experience within financial services or another regulated environment
- Experience with Microsoft Defender and Microsoft Sentinel
- Experience conducting application threat modelling and secure architecture reviews
- Experience supporting security incident response and DevSecOps improvement initiatives
What's on Offer
- Competitive salary depending on experience
- Hybrid working with three days per week in Newcastle
- Opportunity to work across a substantial Azure and .NET application environment
- Direct involvement in improving application security and secure development practices
- Collaboration with experienced software development and cyber security teams
- Opportunity to influence security standards, automation and DevSecOps maturity
#J-18808-Ljbffr
Security Engineer in Newcastle upon Tyne employer: TyneStack Ltd
TyneStack Ltd is an excellent employer that fosters a collaborative and innovative work culture in the vibrant city of Newcastle upon Tyne. With a strong emphasis on training and growth, employees benefit from in-house mentoring and the opportunity to work on cutting-edge mobile applications, ensuring both personal and professional development. The hybrid work model allows for flexibility while being part of a supportive team dedicated to delivering high-quality solutions.
