Application Security Engineer

Application Security Engineer

£70,000 - £85,000 + Bonus + Excellent Benefits Remote Working | Midlands Office (approx. 2 days per month) Candidates must be eligible to obtain SC Clearance

We are seeking an experienced Application Security Engineer to help embed security across the software development lifecycle and strengthen application security capabilities within a complex enterprise environment.

Working closely with Development, DevOps and Platform Engineering teams, you will drive secure-by-design principles, implement DevSecOps practices and ensure security controls are integrated throughout modern software delivery pipelines.

Key Responsibilities

Embed security throughout the SDLC, from design through to deployment.

Promote secure coding, security-by-design and shift-left security principles.

Integrate and optimise security controls within CI/CD pipelines.

Manage and enhance SAST, DAST, SCA and IAST capabilities.

Configure, support and optimise Checkmarx and related application security tooling.

Improve security testing, vulnerability management and remediation processes.

Provide application security guidance to development and engineering teams.

Support cloud-native, containerised and modern application environments.

Contribute to application security standards, awareness and continuous improvement initiatives.

About the Role

This is a senior technical role offering significant autonomy and influence across the organisation's software engineering and cyber security functions. You'll act as a subject matter expert for application security, working closely with Development, Architecture, DevOps and Security teams to improve security maturity and reduce application risk.

Required Skills & Experience

Experience in Application Security, DevSecOps or Security Engineering.

Strong understanding of secure software development and application security best practice.

Experience securing CI/CD pipelines and development environments.

Hands-on experience with Checkmarx or similar security testing tools.

Knowledge of SAST, DAST, SCA and vulnerability management.

Understanding of cloud-hosted applications, containers and modern architectures.

Familiarity with OWASP, ISO27001 and NCSC CAF frameworks.

Strong stakeholder engagement and communication skills.

Awareness of software supply chain threats, cloud security and emerging AI-related risks.

Exposure to Prisma Cloud, Cortex or similar platforms would be advantageous.

What's on Offer?

£70,000 - £85,000 salary

Annual bonus

Comprehensive benefits package

Remote-first working model

Exposure to modern DevSecOps and Application Security technologies

Opportunity to shape application security practices across a large-scale enterprise environment