Jobgether
Senior Information Security Engineer - Application Security
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Senior Information Security Engineer - Application Security
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Information Security Engineer - Application Security based in the United Kingdom.
This is an exciting opportunity for a senior security professional to shape and strengthen application security practices within a highly technical, cloud-native environment. The role focuses on embedding security across the entire software development lifecycle, partnering closely with engineering teams to build secure, scalable, and resilient products. You will work on modern technologies, distributed architectures, and CI/CD ecosystems while driving security automation and risk-based decision-making. As part of a collaborative and experienced security team, you will have the opportunity to influence security strategy, improve developer experience, and directly contribute to customer trust and platform integrity. This position offers significant autonomy, global collaboration, and the chance to make a visible impact in a rapidly evolving technology landscape.
Accountabilities
- Partner with engineering teams throughout the software development lifecycle to integrate security-by-design principles into products and services.
- Lead the implementation, optimization, and integration of application security tools, including SAST, DAST, SCA, and container security solutions within CI/CD pipelines.
- Drive vulnerability management initiatives by identifying, prioritizing, and coordinating remediation efforts across applications and software supply chains.
- Conduct secure architecture reviews, threat modeling exercises, and risk assessments for distributed, API-driven, and microservices-based systems.
- Support and coordinate application security incidents, collaborating with internal stakeholders to investigate, mitigate, and learn from security events.
- Contribute to security audits, customer assurance activities, compliance initiatives, and continuous improvement of security processes.
- Promote pragmatic and developer-friendly security practices while enabling teams to make informed, risk-based decisions.
- Help enhance the overall security posture of products and engineering processes through automation, guidance, and strategic security initiatives.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Requirements
- Significant hands-on experience in software engineering and secure coding practices, particularly within Java-based environments.
- Strong background in securing SaaS platforms, cloud-native applications, and modern CI/CD ecosystems.
- Proven experience conducting secure design reviews, threat modeling, and risk assessments for distributed systems and microservices architectures.
- Deep expertise in application security tooling, including SAST, DAST, SCA, dependency management, and container/image scanning technologies.
- Strong knowledge of vulnerability management processes, including triage, prioritization, remediation coordination, and risk acceptance frameworks.
- Experience managing or supporting security incidents and escalations in complex environments.
- Excellent communication and stakeholder management skills, with the ability to explain complex security concepts to both technical and non-technical audiences.
- Collaborative and developer-centric mindset, focused on enabling secure innovation rather than acting as a gatekeeper.
- Experience with additional technologies such as Python, JavaScript, or TypeScript is considered an advantage.
- Familiarity with Kubernetes, container security, and modern cloud environments is highly desirable.
- Previous experience within B2B software organizations, particularly in high-availability or multi-tenant environments, is a plus.
- Experience delivering security training, workshops, or awareness initiatives for engineering teams is beneficial.
Benefits
Get help with your application
Your very own career expert that helps elevate your application to the next level.
- Competitive and transparent compensation package aligned with experience, skills, and location.
- Equity participation opportunities through a virtual stock option program, where applicable.
- Fully remote and flexible working model with support for home office setups and co-working spaces.
- Flexible time-off policies designed to promote work-life balance and wellbeing.
- Access to global and locally tailored healthcare and wellbeing programs, including mental health support.
- Lifestyle benefits program supporting personal wellbeing, family care, learning, and financial wellness initiatives.
- Retirement, pension, life insurance, and disability coverage where locally applicable.
- Annual learning and development budget for certifications, courses, books, and professional growth initiatives.
- Opportunities for in-person collaboration through annual company gatherings, team off-sites, and local community events.
- Inclusive, international, and highly collaborative culture with significant opportunities for career progression and impact.
How Jobgether works
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Why Apply Through Jobgether?
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location