Application Security Engineer

Application Security Engineer
Location: London (Hybrid)
Contract: Inside IR35

We're looking for a hands-on Application Security Engineer to join a growing cyber engineering team. You'll play a key role in vulnerability remediation, security incident response, identity and secrets management, and security automation across cloud and application environments.

Key Responsibilities

• Manage the end-to-end Hacker One lifecycle, from triage to remediation and closure.
• Support security incident investigations and implement effective fixes.
• Provide guidance on Okta and Doppler integrations and best practices.
• Design and build security automation to improve scale and efficiency.
• Partner with the Director of Cybersecurity on App Sec, Dev Sec Ops , and cloud security initiatives.

Required Experience

• Hands-on experience with Hacker One or similar bug bounty platforms.
• Strong web application security knowledge (OWASP Top 10, ASVS, threat modelling).
• Experience building security tooling and automation.
• Familiarity with security testing tools such as Burp Suite.
• Exposure to incident response and application security.
• Strong communication and stakeholder engagement skills.

Desirable Skills