Remarkable Resourcing
Senior Application Security Engineer
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Senior Application Security Engineer
Location: London – On-site
Contract: 6 months initially
Rate: Inside IR35
Industry: Cybersecurity / Technology Consultancy
We are looking for a Senior Application Security Engineer to join a global security team on an initial 6-month contract in London. This is a hands-on application security role, working closely with software development teams to identify vulnerabilities, improve secure development practices and embed security throughout the SDLC.
You will act as an Application Security SME, providing security guidance across development teams while carrying out code reviews, penetration testing, architectural reviews and application security testing. You will also contribute to vulnerability research and help shape application security standards, processes and tooling across the organisation.
Key Responsibilities
- Act as a subject matter expert for application security, providing guidance and security recommendations to development teams.
- Perform manual source-code reviews, application penetration testing and security architecture reviews.
- Identify vulnerabilities and develop practical remediation and mitigation strategies with development teams.
- Drive the use of SAST, DAST, IAST and SCA tooling across the application development lifecycle.
- Support the responsible disclosure process and investigate externally reported vulnerabilities.
- Develop and implement security controls, processes and tooling to ensure security and privacy are built into applications by design.
- Advise engineering teams on secure SDLC, DevSecOps and application security best practices.
- Research emerging application attack vectors and assess their potential impact on applications and infrastructure.
- Define and promote application security architecture patterns and standards.
- Work collaboratively within a global application security team, sharing knowledge and coaching colleagues on security practices.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Key Skills & Experience
- 5+ years' experience working in Information Security, Application Security, Security Research or a closely related discipline.
- 3+ years' experience performing manual source-code security reviews and/or strong programming experience in Java,.NET, Python or JavaScript.
- Strong knowledge of the OWASP Top 10, web application security and API security.
- Proven application penetration testing and security code review experience.
- Hands-on experience with SAST, DAST, IAST and SCA tools and processes.
- Strong understanding of cloud-native architectures, microservices, containers and secure cloud deployments.
- Good knowledge of authentication, authorisation, security protocols and applied cryptography.
- Experience with web security technologies including CSP, CORS, OAuth and JWT.
- Understanding of CI/CD pipelines, build systems and DevSecOps principles.
- Experience developing security architecture patterns and standards within enterprise environments.
- Experience with cloud security solutions and major cloud platforms.
- Knowledge of threat modelling methodologies such as STRIDE, PASTA and MITRE ATT&CK.
- Practical experience with web application proxies such as Burp Suite, OWASP ZAP or Fiddler.
- Strong communication skills, with the ability to work effectively with both technical and non-technical stakeholders.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Desirable
- Experience with CSPM and/or ASPM platforms.
- OSWE, OSCP, GWEB, GPEN or similar security certification.
- Mobile application penetration testing experience.
- Knowledge of AI/ML, LLM security, AI red teaming or AI guardrails.
- Degree in Computer Science, Cybersecurity or another relevant technical discipline, or equivalent experience.
This is an excellent opportunity for an experienced Application Security Engineer to work in a highly technical environment, influence secure development practices at scale and collaborate with a global security function.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location