Runtime
Senior Application Security Engineer

How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Senior Application Security Engineer
Security Platform - Remote UK
£90,000 - £130,000 DOE + Equity
The problem worth solving
Most attacks don't start with someone breaking down the front door. They start with something that was already let in - a dependency, a package, a library that looked legitimate. The software your engineers are building right now is only as secure as everything it quietly pulls in from the outside world. That's a hard problem. AI is making it exponentially harder.
Regulators are paying attention. Enterprise security teams are scrambling. The companies building the infrastructure to get ahead of this are the ones that matter right now.
What the role involves
- Threat modelling and secure design reviews embedded with engineering teams from day one
- Security code reviews and building the culture for engineers to do the same
- Owning SAST, DAST and SCA tooling - writing automation, not just running products
- Hardening APIs, containers, IaC and CI/CD pipelines across a cloud-native stack
- Penetration testing and vulnerability assessments across services and infrastructure
- Technical lead during incident response and red/blue exercises
- Building security tooling from scratch - production quality, not proof of concept
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What they're looking for
- 5+ years AppSec - the depth of experience matters more than the path you took to get here
- Strong enough with code to hold your own in design reviews, architecture conversations and secure code reviews with senior engineers - you don't need to have been a software engineer but you need to think like one
- Strong AWS security experience - the entire platform runs on it
- Hands-on with security tooling - depth matters more than which products
- Low ego, collaborative, built for a small tight-knit team
- A hacker at heart - CTFs, bug bounty, home labs are all green flags


Get help with your application
Your very own career expert that helps elevate your application to the next level.
The package
- Up to £130,000 depending on experience
- Equity with real upside - technical founders who built the structure to reward engineers properly, IPO trajectory in 3-5 years
- 35 days annual leave + birthday off
- Fully remote, flexible hours
- Pension up to 8% matched
- Private Medical, dental and optical
- Paid sick leave, income protection, life insurance
Interested?
Drop me a message. The details stay confidential until we've spoken. This isn't being advertised widely - if the problem resonates, it's worth a conversation.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location