Staff Application Security Engineer (Remote, UK-Based)

Jobgether • United Kingdom

Remote

Apply Now

AI Summary

Lead the establishment and scaling of an application security function in a high-growth tech company, focusing on fraud and abuse prevention. Combine deep security expertise with hands-on software engineering to design secure SDLCs, integrate AI-powered security tools, and drive vulnerability remediation across APIs, SDKs, and cloud systems. Shape engineering practices, mentor teams, and influence security strategy at scale.

Key Highlights

Build and scale an application security function from the ground up in a high-growth tech environment

Combine senior security engineering with hands-on software development to design secure workflows and tooling

Drive AI-first security initiatives, including AI-assisted vulnerability triage, automated remediation, and secure coding patterns

Key Responsibilities

Design and implement a secure SDLC, integrating threat modeling, secure code reviews, and pre-release testing into engineering workflows

Own and improve application security tooling (SAST/DAST, SCA, secrets detection, container scanning) within CI/CD pipelines

Lead threat modeling, architecture security reviews, and vulnerability management for APIs, SDKs, and cloud-based systems

Develop AI-first security engineering approaches, including AI-assisted vulnerability triage and automated remediation

Conduct hands-on security testing (manual code review, exploitation testing) for fraud/bot mitigation and adversarial threats

Collaborate with engineering teams to mentor Security Champions, provide secure coding guidance, and improve security awareness

Define application security logging, alerting, and incident response processes, coordinating with cloud and infrastructure teams

Support compliance initiatives (e.g., SOC 2, ISO 27001) and provide technical evidence for security controls

Interested in remote work opportunities in Cyber Security? Discover Cyber Security Remote Jobs featuring exclusive positions from top companies that offer flexible work arrangements.

Technical Skills Required

Application Security (OWASP Top 10, Threat Modeling, SAST/DAST, SCA) Software Engineering (TypeScript/JavaScript/Go/Python) CI/CD Pipeline Integration & Security Tooling

Benefits & Perks

Annual base salary ranging from $177,000 to $240,000

Fully remote work environment (subject to geographic restrictions)

Significant technical autonomy and executive-level support for security initiatives

Browse our curated collection of remote jobs across all categories and industries, featuring positions from top companies worldwide.

Nice to Have

Experience in fraud detection, bot mitigation, or identity security

Cloud security knowledge (AWS IAM, secrets management, Wiz/Cloudflare integration)

Bug bounty program management (HackerOne/Bugcrowd) or AI/ML security risks

Job Description

Help establish and scale a dedicated application security function within a high-growth technology environment where protecting customers against fraud and abuse is a core priority. As a senior individual contributor, you will combine deep security expertise with hands-on software engineering to identify vulnerabilities, strengthen development workflows, and build practical security tooling. You will design secure software development practices, lead threat modeling and security reviews, and drive vulnerability remediation across complex APIs, SDKs, and cloud-based systems. Working closely with engineering teams and security leadership, you will integrate AI-powered tools into security testing and remediation while maintaining rigorous quality standards. This role offers substantial technical autonomy, opportunities to influence engineering practices across the organization, and the chance to solve challenging security problems at scale. You will help make security an integral part of product development rather than a separate compliance requirement.

Want the full job description? Read the complete details on LinkedIn, the original posting.

Continue on LinkedIn

This is a short excerpt. All rights to the full description belong to its original publisher.