Senior Application Security Engineer

About the Role

Our client is seeking an experienced Senior Application Security Engineer to join their growing team in Cambridge . This role is vital in ensuring the security of software applications throughout their entire lifecycle, from design to deployment and maintenance. You will work closely with development teams to embed security best practices, conduct security reviews, and implement measures to protect against application-level threats. This hybrid position offers the benefit of both on-site collaboration and remote flexibility, fostering an effective and balanced working environment.

Key Responsibilities

• Integrate security into the Software Development Lifecycle (SDLC) through secure coding practices, code reviews, and security testing.
• Perform security assessments of web applications, APIs, and mobile applications.
• Develop and maintain secure coding guidelines and provide training to development teams.
• Implement and manage application security tools such as SAST, DAST, and WAFs.
• Respond to and investigate security vulnerabilities discovered in applications.

Requirements

• Proven experience as an Application Security Engineer or Software Developer with a strong security focus.
• Deep understanding of common web application vulnerabilities (e.g., OWASP Top 10) and mitigation techniques.
• Proficiency in security testing tools and methodologies (SAST, DAST, IAST).
• Experience with secure software development principles and frameworks.
• Strong knowledge of programming languages commonly used in web development (e.g., Java, Python, JavaScript).

Benefits

• Competitive salary and comprehensive benefits package.
• Hybrid working model offering flexibility and work-life balance.
• Opportunities for professional growth and advancement in application security.
• Work with cutting-edge technologies and innovative development teams.
• Collaborative and supportive work culture focused on quality and security.