Experis UK
Application Security Specialist
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Shape the Future of Secure Software Development Across a Leading Enterprise Organisation
Competitive Salary + Bonus + Car Allowance + Benefits | London | Hybrid Working
Join a growing Cyber, Risk & Security team and play a pivotal role in strengthening the security of products, platforms and services delivered across a complex European technology environment.
As an Application Security Specialist, you'll be a key member of the Secure Development Centre of Excellence (CoE), partnering with engineering teams to embed security throughout the software development lifecycle. You'll drive a security-first culture, influence development standards, and help deliver secure, resilient applications for both internal and customer-facing solutions.
Key Responsibilities
Application Security & Assurance
- Lead application security reviews for high-risk products and services.
- Conduct and oversee SAST, DAST, fuzz testing and API security assessments.
- Perform architecture, design and code security reviews.
- Assess applications against OWASP Top 10 and other industry standards.
- Translate findings into practical remediation plans and developer guidance.
Secure Development & DevSecOps
- Support the development of secure coding standards across technologies including Java, C and C++.
- Embed security throughout the Software Development Lifecycle (SDLC).
- Design and support secure CI/CD pipeline patterns.
- Integrate SAST, DAST, SCA and security tooling into development workflows.
- Support automation of security controls and assurance activities.
Security Leadership & Developer Enablement
- Act as a subject matter expert for Application Security across the organisation.
- Deliver secure coding training, workshops and awareness sessions.
- Mentor development teams and promote security-first engineering practices.
- Drive adoption of secure development standards and methodologies.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Threat & Vulnerability Management
- Support application vulnerability management activities.
- Assist development teams with vulnerability triage and remediation planning.
- Identify recurring weaknesses and opportunities for continuous improvement.
- Monitor emerging threats, vulnerabilities and industry trends.
Secure AI Development
- Support the adoption of secure development practices for AI-enabled applications.
- Assist with controls relating to AI model security, data handling and misuse risks.
- Help development teams securely adopt emerging technologies.
Essential Experience
- 3-5 years' experience within Application Security, Secure Development, or Software Engineering with a security focus.
- Hands-on experience conducting application security reviews and assessments.
- Strong knowledge of application security principles and secure coding practices.
- Experience working with SAST, DAST and Software Composition Analysis (SCA) tools.
- Experience integrating security controls into CI/CD pipelines.
- Strong understanding of OWASP Top 10 and common vulnerability classes.
- Experience with API and web application security.
- Knowledge of threat modelling techniques and methodologies.
- Experience working closely with software engineering teams in enterprise environments.
- Ability to read and understand code in languages such as Java, C, C++, C#, Python or similar.
- Strong understanding of shift-left security and secure development lifecycle practices.
Highly Desirable Skills
- Fuzz testing and advanced dynamic testing techniques.
- Manual code review experience.
- DevSecOps implementation and security automation.
- Experience integrating SAST, DAST, SCA and secrets scanning tools.
- Cloud-native, microservices and serverless architecture security.
- Secure AI and data-driven application security.
- OWASP SAMM, ASVS or other security maturity frameworks.
- Experience building or supporting a Security Centre of Excellence.
- Experience working within multinational or multi-entity organisations.
- Delivery of developer-focused security training and workshops.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Qualifications
Essential
- Degree or equivalent professional experience in:
- Computer Science
- Software Engineering
- Cyber Security
- Information Security
- Or a related technical discipline.
- Formal training, certification or demonstrable experience within Secure Development or Application Security.
Desirable
- CSSLP (Certified Secure Software Lifecycle Professional).
- GWAPT or GWEB.
- OSCP or equivalent Offensive Security certifications.
- Microsoft Azure Security Engineer Associate.
- AWS Security Specialty.
- Google Professional Cloud Security Engineer.
- DevSecOps or CI/CD related certifications.
- ISO 27001 certifications.
- NIST CSF and NIST SSDF knowledge.
Package & Benefits
- Competitive salary
- Annual bonus
- Car allowance
- Hybrid working
- Comprehensive benefits package
- Ongoing training and professional development
- Industry-recognised certification support
- Exposure to enterprise-scale application security programmes
- Opportunity to work with modern cloud, DevSecOps and AI technologies
- Clear career progression within a growing cyber security function
Apply now to learn more about this exciting Application Security Specialist opportunity.
If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location