Tiro Partners Limited
Senior Application Security Engineer
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
AppSec / Python / DevSecOps / Azure / Security Engineering
Role
Application Security Engineer
Location
Remote UK
Salary
Up to £85,000
We’re looking for an Application Security Engineer to join our security team and take a hands-on role in embedding security throughout the software development lifecycle.
You’ll work closely with developers, engineering, cloud, and architecture teams to shift security left, improve the security of applications and APIs, and build scalable AppSec capabilities across our technology estate.
This is an ideal opportunity for an AppSec-focused engineer who enjoys working directly with development teams, automating security, and turning security requirements into practical solutions.
The role
- Own and continuously improve application security across the SDLC, from design and development through to deployment.
- Embed security controls and testing into CI/CD pipelines, including GitHub Actions.
- Implement, integrate, and operate SAST, DAST, IAST, and SCA tooling.
- Work directly with developers to identify, triage, and remediate vulnerabilities, helping teams understand and fix security issues at source.
- Perform and support threat modelling, secure design reviews, and application security assessments.
- Develop and improve security automation and security-as-code / policy-as-code capabilities, including tools such as OPA.
- Help secure modern applications, APIs, Kubernetes, and containerised workloads.
- Support the security of cloud and data platforms, including Azure, Databricks, Dagster, and Snowflake.
- Build and improve vulnerability management processes, metrics, and AppSec reporting.
- Contribute to ISO 27001 activities and broader security governance.
- Champion secure development practices and help engineering teams adopt secure-by-design principles.
- Continuously improve our AppSec tooling, processes, and developer experience.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
About you
You’ll have strong hands-on experience in Application Security / Product Security / DevSecOps, with a passion for working alongside developers to build more secure software.
Ideally, you’ll have:
- Strong practical experience across application security and secure software development.
- Experience with SAST, DAST, IAST, SCA, and vulnerability management.
- A good understanding of OWASP, common application vulnerabilities, and secure coding principles.
- Experience with threat modelling, security reviews, and vulnerability remediation.
- Strong Python skills and an interest in security automation.
- Experience securing GitHub and GitHub Actions and integrating security into CI/CD.
- Experience with APIs, Kubernetes, and containers.
- Experience with Terraform / Infrastructure as Code.
- Knowledge of policy-as-code, ideally with OPA.
- Experience working with developers and engineering teams to drive security by design.
- Strong cloud security knowledge, particularly Azure.
- KQL experience would be advantageous.
- Knowledge or experience of ISO 27001 would be beneficial.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Key skills
Application Security / AppSec / Python / DevSecOps / SAST / DAST / SCA / Threat Modelling / GitHub / Kubernetes / APIs / Terraform / Azure / Security Engineering
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location