Senior Application Security Engineer

About the Role

Our client is seeking a highly skilled Senior Application Security Engineer to join their dynamic technology team in Cambridge . This role is central to ensuring the security of their software development lifecycle (SDLC), from design to deployment. You will work closely with development teams to embed security best practices, conduct code reviews, and implement security tooling. This is an excellent opportunity for an engineer passionate about building secure software and making a tangible impact on product security within an innovative company.

Key Responsibilities

• Integrate security into the software development lifecycle (SDLC), promoting secure coding practices.
• Conduct security code reviews, static analysis (SAST), and dynamic analysis (DAST) of applications.
• Develop and maintain security testing tools and frameworks to automate vulnerability detection.
• Collaborate with development teams to identify, prioritize, and remediate application security vulnerabilities.
• Provide guidance and training to developers on secure coding techniques and threat modelling.
• Stay updated on emerging application security threats and vulnerabilities, and advise on mitigation strategies.

Requirements

• Bachelor's degree in Computer Science, Software Engineering, or a related field.
• Significant experience (5+ years) in software development with a strong focus on application security .
• Proficiency in secure coding principles and common vulnerability types (e.g., OWASP Top 10).
• Experience with security testing tools, SAST, DAST, and IAST solutions.
• Knowledge of cloud security principles and container security (e.g., Docker, Kubernetes).
• Strong communication and collaboration skills to work effectively with development teams.

Benefits

• Competitive salary and performance-related bonuses.
• Hybrid working model offering flexibility and balance.
• Comprehensive health, dental, and vision insurance.
• Generous pension scheme and life assurance.
• Opportunities for professional growth, including security certifications and training.