R

Senior Application Security Engineer - Security Platform (Remote UK)

runtime United Kingdom
Remote
Apply
AI Summary

This role focuses on enhancing application security by embedding with engineering teams for threat modeling and secure design reviews. Key responsibilities include owning SAST, DAST, and SCA tooling, hardening cloud-native infrastructure, and leading incident response. Requires 5+ years of AppSec experience, strong AWS security knowledge, and a hacker mindset.

Key Highlights
Enhance application security through threat modeling and secure design reviews.
Own and automate SAST, DAST, and SCA tooling.
Harden cloud-native stack including APIs, containers, IaC, and CI/CD pipelines.
Key Responsibilities
Threat modelling and secure design reviews embedded with engineering teams from day one.
Security code reviews and building the culture for engineers to do the same.
Owning SAST, DAST and SCA tooling - writing automation, not just running products.
Hardening APIs, containers, IaC and CI/CD pipelines across a cloud-native stack.
Penetration testing and vulnerability assessments across services and infrastructure.
Technical lead during incident response and red/blue exercises.
Building security tooling from scratch - production quality, not proof of concept.
Technical Skills Required
Application Security AWS Security Security Tooling
Benefits & Perks
Salary: £90,000 - £130,000
Equity with upside
35 days annual leave + birthday off
Fully remote
Flexible hours
Pension up to 8% matched
Private Medical, dental, and optical
Paid sick leave, income protection, life insurance
Nice to Have
CTFs, bug bounty, home labs

Job Description


Senior Application Security Engineer

Security Platform - Remote UK

£90,000 - £130,000 DOE + Equity


The problem worth solving

Most attacks don't start with someone breaking down the front door. They start with something that was already let in - a dependency, a package, a library that looked legitimate. The software your engineers are building right now is only as secure as everything it quietly pulls in from the outside world. That's a hard problem. AI is making it exponentially harder.

Regulators are paying attention. Enterprise security teams are scrambling. The companies building the infrastructure to get ahead of this are the ones that matter right now.


What the role involves

  • Threat modelling and secure design reviews embedded with engineering teams from day one
  • Security code reviews and building the culture for engineers to do the same
  • Owning SAST, DAST and SCA tooling - writing automation, not just running products
  • Hardening APIs, containers, IaC and CI/CD pipelines across a cloud-native stack
  • Penetration testing and vulnerability assessments across services and infrastructure
  • Technical lead during incident response and red/blue exercises
  • Building security tooling from scratch - production quality, not proof of concept


What they're looking for

5+ years AppSec - the depth of experience matters more than the path you took to get here

Strong enough with code to hold your own in design reviews, architecture conversations and secure code reviews with senior engineers - you don't need to have been a software engineer but you need to think like one

Strong AWS security experience - the entire platform runs on it

Hands-on with security tooling - depth matters more than which products

Low ego, collaborative, built for a small tight-knit team

A hacker at heart - CTFs, bug bounty, home labs are all green flags


The package

  • Up to £130,000 depending on experience
  • Equity with real upside - technical founders who built the structure to reward engineers properly, IPO trajectory in 3-5 years
  • 35 days annual leave + birthday off
  • Fully remote, flexible hours
  • Pension up to 8% matched
  • Private Medical dental and optical
  • Paid sick leave, income protection, life insurance


Interested?

Drop me a message. The details stay confidential until we've spoken. This isn't being advertised widely - if the problem resonates, it's worth a conversation.


Similar Jobs

Explore other opportunities that match your interests

Visa Sponsorship Relocation Remote
Job Type Full-time
Experience Level Mid-Senior level

Harris Computer

United Kingdom
Visa Sponsorship Relocation Remote
Job Type Contract
Experience Level Not Applicable

Babcock International Group

United Kingdom
Visa Sponsorship Relocation Remote
Job Type Full-time
Experience Level Mid-Senior level

spencer rose

United Kingdom

Subscribe our newsletter

New Things Will Always Update Regularly