Senior Application Security Engineer

Senior Application Security Engineer

Salary: up to £65,000 basic \+ 5% bonus

Location: Central Manchester, 3 days in the office and 2 days from home

Want to shape how security is built into software, rather than simply report vulnerabilities after release? This is a hands-on Application Security Engineer role with significant influence across development, product and technology teams for a growing professional services business.

You’ll be a trusted technical voice on secure design and delivery. You’ll challenge decisions when needed, explain risks clearly to stakeholders and help engineers make practical fixes. There is no line management responsibility: your influence will come from your technical judgement and ability to work well with people.

Benefits

• Up to £65,000 basic salary
• 5% bonus, paid quarterly
• 23 days’ annual leave, rising to 25 days with service
• Discretionary festive shutdown, typically around 5 additional days
• Option to buy or sell up to 3 days’ holiday
• 2 days working from home each week
• Extended 1\.5-hour lunch for health and fitness activities
• 4:30pm Friday finish
• 4\.5% employer pension contribution
• 4x life insurance
• Vitality healthcare

What you’ll do

• Review the security of internally developed, cloud-hosted and AI-enabled applications.
• Help teams identify, prioritise and fix vulnerabilities in code, APIs and integrations.
• Embed security checks into GitHub and Azure DevOps delivery pipelines.
• Advise on secure architecture, coding practices, access controls and application risks.
• Work with existing tools and third-party testing results to guide remediation and verify fixes.
• Help maintain and secure legacy applications.
• Build productive relationships with developers and stakeholders, balancing security with delivery pace.

What you’ll bring

• A software engineering background and the ability to understand and work with application code.
• Application security knowledge, including CI/CD security and a grounding in the OWASP Top 10\.
• Experience with Azure DevOps and, ideally, applications developed in-house and deployed through GitHub and Azure.
• The confidence to explain technical decisions, influence developers and communicate with stakeholders at different levels.
• A practical, positive approach to AI-assisted development and a willingness to develop your AI-security knowledge.

You don’t need to have managed a team, be an expert in every programming language, or have specialist penetration testing or AI-security experience. Strong engineering fundamentals and sound judgement matter more than matching every item on a checklist.