Application Security Engineer

Application Security Engineer

£70,000 - £85,000 + Bonus + Excellent Benefits
Remote Working | Midlands Office (approx. 2 days per month)
Candidates must be eligible to obtain SC Clearance

We are seeking an experiencedApplication Security Engineer to help embed security across the software development lifecycle and strengthen application security capabilities within a complex enterprise environment.

Working closely with Development, DevOps and Platform Engineering teams, you will drive secure-by-design principles, implement DevSecOps practices and ensure security controls are integrated throughout modern software delivery pipelines.

Key Responsibilities

• Embed security throughout theSDLC, from design through to deployment.
• Promote secure coding, security-by-design andshift-left security principles.
• Integrate and optimise security controls withinCI/CD pipelines.
• Manage and enhanceSAST, DAST, SCA and IAST capabilities.
• Configure, support and optimiseCheckmarx and related application security tooling.
• Improve security testing, vulnerability management and remediation processes.
• Provide application security guidance to development and engineering teams.
• Support cloud-native, containerised and modern application environments.
• Contribute to application security standards, awareness and continuous improvement initiatives.

About the Role

This is a senior technical role offering significant autonomy and influence across the organisation's software engineering and cyber security functions. You'll act as a subject matter expert for application security, working closely with Development, Architecture, DevOps and Security teams to improve security maturity and reduce application risk.

Required Skills & Experience

• Experience inApplication Security, DevSecOps or Security Engineering.
• Strong understanding of secure software development and application security best practice.
• Experience securingCI/CD pipelines and development environments.
• Hands-on experience withCheckmarx or similar security testing tools.
• Knowledge ofSAST, DAST, SCA and vulnerability management.
• Understanding of cloud-hosted applications, containers and modern architectures.
• Familiarity withOWASP, ISO27001 and NCSC CAF frameworks.
• Strong stakeholder engagement and communication skills.
• Awareness of software supply chain threats, cloud security and emerging AI-related risks.
• Exposure toPrisma Cloud, Cortex or similar platforms would be advantageous.

What's on Offer?

• £70,000 - £85,000 salary
• Annual bonus
• Comprehensive benefits package
• Remote-first working model
• Exposure to modern DevSecOps and Application Security technologies
• Opportunity to shape application security practices across a large-scale enterprise environment