TECHOHANA
Application Security Engineer
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Application Security Engineer - Up to £75,000 - twice a month in Cambridge
TechOhana have partnered with an established software company building secure remote connectivity technology for enterprise, industrial and regulated customers worldwide, to bring on an Application Security Engineer.
Security here is tested in, not bolted on. You'll be hands-on across pentesting, DAST, IAST, SAST and SCA, working directly with development and QA to catch what automated tools alone can't.
The role:
- Manually confirm and exploit vulnerabilities that scanners miss.
- Run threat modelling at the design stage.
- Advise developers on secure code, help harden production deployments, and support incident response when it counts.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What you'll bring:
- Hands-on experience with DAST, IAST and penetration testing tools (Burp Suite, OWASP ZAP, Frida), with the ability to manually identify and exploit vulnerabilities beyond automated output
- 3 to 5 years in an application security, penetration testing, or security-focused software engineering role
- Strong understanding of secure SDLC, DevSecOps, and core vulnerability classes (XSS, SQL injection, broken access control)
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Nice to have (bonus, not required):
- SCA tools experience (Blackduck, Mend/Whitesource, Snyk)
- CTF, bug bounty, HackTheBox/TryHackMe history, or a technical portfolio
- Exploit development, or knowledge of NIST CSF, GDPR, ISO 27001, SOC 2
What's on offer:
- Up to £75,000
- Permanent
- Hybrid, with attendance at the Cambridge office roughly twice a month
You don't need to tick every box. If you've got the core and the right attitude, or know someone who does, get in touch. Interviews are moving quickly.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills