Application Security Engineer

Bristol or Edinburgh – minimum of 3 days per week on site.

An impressive financial services business is seeking an Application Security Engineer to support the risk and remediation activities of a large technology transformation programme, estimated to take 3–5 years. The successful candidate will work closely with the wider security and technology teams to define the strategy and roadmap for technology changes.

Duties and Responsibilities

• Provide security input into solution design to ensure that security principles are incorporated at both the platform and software level
• Automate tooling to run security fixes over a variety of repos
• Ensure that security requirement input is provided across the programme to guarantee secure-by-design technology
• Support the teams to interpret security requirements of the project
• Conduct threat modelling and penetration testing to identify threats and establish controls
• Support wider teams with security advice and guidance in both verbal and written formats
• Lead delivery of hands‑on security engineering solutions when needed

Qualifications

• Experience in a similar role, in both responsibility and scale
• Proficiency with one of the following: Python, Jenkins, PowerShell, Bash, GitHub Actions
• Relevant professional certifications (e.g., CISSP, SANS, Crest/CHECK)
• Strong understanding of shift‑left approaches
• Proven experience working with development teams on security‑related topics
• Hands‑on secure software development or applications security testing
• Likely background in penetration testing, SRE, or software development

We invite individuals from underrepresented groups to apply for any of our roles and are committed to supporting accessibility needs.

Seniority Level

Mid‑Senior level

Employment Type

Full‑time

Job Function

Engineering and Information Technology