Application Security Engineer

Application Security Engineer
£70,000 - £85,000 + Bonus + Excellent Benefits
Remote Working | Midlands Office (approx. 2 days per month)
Candidates must be eligible to obtain SC Clearance
We are seeking an experienced  Application Security Engineer  to help embed security across the software development lifecycle and strengthen application security capabilities within a complex enterprise environment.
Working closely with Development, Dev Ops and Platform Engineering teams, you will drive secure-by-design principles, implement Dev Sec Ops  practices and ensure security controls are integrated throughout modern software delivery pipelines.

Key Responsibilities
Embed security throughout the  SDLC , from design through to deployment.
Promote secure coding, security-by-design and  shift-left security  principles.
Integrate and optimise security controls within  CI/CD pipelines .
Manage and enhance  SAST, DAST, SCA and IAST  capabilities.
Configure, support and optimise  Checkmarx  and related application security tooling.
Improve security testing, vulnerability management and remediation processes.
Provide application security guidance to development and engineering teams.
Support cloud-native, containerised and modern application environments.
Contribute to application security standards, awareness and continuous improvement initiatives.
About the Role
This is a senior technical role offering significant autonomy and influence across the organisation's software engineering and cyber security functions. You'll act as a subject matter expert for application security, working closely with Development, Architecture, Dev Ops and Security teams to improve security maturity and reduce application risk.
Required Skills & Experience
Experience in  Application Security, Dev Sec Ops  or Security Engineering .
Strong understanding of secure software development and application security best practice.
Experience securing  CI/CD pipelines  and development environments.
Hands-on experience with  Checkmarx  or similar security testing tools.
Knowledge of  SAST, DAST, SCA  and vulnerability management.
Understanding of cloud-hosted applications, containers and modern architectures.
Familiarity with  OWASP, ISO
27001 and NCSC CAF  frameworks.
Strong stakeholder engagement and communication skills.
Awareness of software supply chain threats, cloud security and emerging AI-related risks.
Exposure to  Prisma Cloud, Cortex or similar platforms  would be advantageous.
What's on Offer?
£70,000 - £85,000 salary
Annual bonus
Comprehensive benefits package
Remote-first working model
Exposure to modern Dev Sec Ops  and Application Security technologies
Opportunity to shape application security practices across a large-scale enterprise environment