Secure Source
Application Security Specialist
London
Posted about 20 hours ago
How your CV stacks up
1Upload CV
2Analyse CV
3Improve CV
Upload your CV to see how well it fits this job role
?%
Application Security Specialist
The Application Security Specialist exists to embed application security expertise across Europe’s products and services, supporting the Secure Development Practice and enabling a consistent ‘shift-left’ approach. The role is accountable for advancing application security capability, leading security reviews on higher-risk systems, and ensuring secure development practices are adopted across engineering teams. The post holder will act as a technical authority on application security, helping reduce vulnerability risk and improve security outcomes across both internal IT systems and customer-facing solutions.
Application Security Capability Development (CoE Contribution)
- Contribute to establishing and operating a pan-European application security capability within the Secure Development CoE
- Build and maintain a network of application security practitioners across development teams
- Develop an understanding of current application security maturity, tooling, and practices across Europe
- Define and promote consistent application security methodologies, patterns, and practices
- Contribute to CoE forums, standards discussions, and knowledge sharing across teams
Application Security Reviews and Assurance
- Lead application security reviews for high-risk products and services
- Coordinate with Product Security Development Specialists to define scope, coverage, and prioritization
- Conduct and oversee:
- Static application security testing (SAST)
- Dynamic testing (DAST)
- Fuzz testing where appropriate
- API and interface security reviews
- Architecture and design-level assessments
- Assessment against OWASP Top 10 and other relevant standards
- Interpret findings and translate them into actionable remediation plans
- Provide secure design guidance during early development stages
Secure Development Standards and Guidance
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
- Support the development and maintenance of secure coding standards across key languages such as C, C++, Java, and other relevant stacks
- Contribute to application security policies and supporting technical documentation
- Provide practical guidance to developers on secure coding and remediation approaches
- Align standards with recognized frameworks such as OWASP and relevant secure development frameworks
Developer Enablement and Training
- Deliver and coordinate application security training for development teams
- Introduce internal or external specialized training content
- Support secure coding awareness, hands-on workshops, and threat-focused learning
- Act as a point of contact for development teams needing security guidance
Security Culture and Shift-Left Adoption
- Promote a security-first mindset within engineering and product teams
- Embed security considerations into design, development, and deployment processes
- Support early-stage security engagement in development lifecycles
- Champion pragmatic and developer-friendly security practices
Threat and Vulnerability Management (Product Focus)
- Support the threat and vulnerability management process across product and service lines
- Assist in triaging, prioritizing, and managing application-level vulnerabilities
- Provide technical input into remediation planning and risk decisions
- Identify recurring issues and systemic weaknesses in development practices
CI/CD Security Integration and Tooling
- Design and support secure CI/CD pipeline patterns
- Identify, evaluate, and help implement appropriate security tooling across development pipelines
- Integrate SAST, DAST, SCA, and other application security tools into build and release processes
- Support automation of security controls and checks within development workflows
Secure AI Development Support
- Contribute to the development of secure practices for AI-enabled applications
- Support emerging controls and patterns related to AI model security, data handling, and misuse risks
- Assist teams in embedding security into AI and data-driven development processes
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Continuous Improvement
- Monitor application security trends, vulnerabilities, and emerging threats
- Recommend improvements to processes, tooling, and developer practices
- Contribute to the maturity improvement of the Secure Development Practice
Task Level
- Conducting application security scans and manual reviews
- Supporting remediation of vulnerabilities
- Producing technical findings and guidance
- Delivering training and guidance sessions
Process and Policy Level
- Designing and embedding application security processes in SDLC
- Developing secure coding standards and review frameworks
- Implementing security controls into CI/CD pipelines
Theoretical and Cross-Disciplinary Level
- Applying secure development frameworks such as SSDF
- Understanding application, infrastructure, and data security interactions
- Translating security theory into practical secure development practices
- Operating across software engineering, cybersecurity, and risk domains
Technical Skills Required
- Strong knowledge of application security principles and practices
- Experience with SAST, DAST, and software composition analysis tools
- Knowledge of secure coding practices across languages such as Java, C, C++
- Experience with CI/CD pipelines and DevSecOps integration
- Threat modelling techniques and tools
- Understanding of OWASP Top 10 and common vulnerability classes
- Experience with API security and web application security
- Understanding of fuzz testing and advanced testing techniques
- Familiarity with secure AI development considerations
- Knowledge of secure development frameworks such as SSDF
- Understanding of vulnerability management processes
Trusted by 25,000+ job seekers
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Application Security
SAST
DAST
SCA
Fuzz Testing
API Security
Threat Modelling
Secure Coding
CI/CD Security
DevSecOps
OWASP Top 10
SSDF
Java
C
C++
Vulnerability Management
Location