Application Security Engineer

We're partnering with a leading investment management organisation looking to add an

Application Security Engineer

to their growing cyber security function.

This is an opportunity to play a key role in improving application security across a large-scale technology estate, working directly with software engineering teams to embed secure development practices and strengthen security throughout the software development lifecycle.

Rather than operating solely as a security specialist, you'll act as a trusted partner to developers, helping teams build secure applications from the outset through practical guidance, threat modelling, code reviews, and secure coding best practices.

What You'll Be Doing

• Collaborating with engineering teams to integrate security throughout the SDLC
• Providing guidance on secure coding practices and application security principles
• Conducting threat modelling and identifying security risks early in the development lifecycle
• Working with developers to remediate vulnerabilities and improve application security posture
• Promoting OWASP best practices and helping establish security standards across engineering teams
• Contributing to DevSecOps initiatives and security automation programmes
• Acting as a security advocate and helping drive a strong security culture across the business

What We're Looking For

• A background in software engineering, development, or technical engineering disciplines
• Experience working within Application Security, Product Security, DevSecOps, or a similar security-focused role
• Strong understanding of secure coding principles and common application security risks
• Good knowledge of OWASP Top 10 and modern application security practices
• Ability to engage and collaborate effectively with developers and technical stakeholders
• Experience with cloud environments, CI/CD pipelines, or modern development practices is beneficial

Why Join?

This role offers the opportunity to work within a highly respected financial services environment where security is viewed as an enabler of software delivery rather than a blocker. You'll have the chance to influence engineering teams, shape security practices, and work on meaningful initiatives that directly impact the organisation's technology strategy.

If you're a developer at heart who enjoys security and wants to help engineering teams build better, more secure software, we'd love to hear from you.