Application Security Engineer

Application Security Engineer £70,000 - £85,000 + Bonus + Excellent Benefits Remote Working | Midlands Office (approx. 2 days per month) Candidates must be eligible to obtain SC Clearance We are seeking an experienced

Application Security Engineer

to help embed security across the software development lifecycle and strengthen application security capabilities within a complex enterprise environment. Working closely with Development, DevOps and Platform Engineering teams, you will drive secure-by-design principles, implement DevSecOps practices and ensure security controls are integrated throughout modern software delivery pipelines. Key Responsibilities Embed security throughout the

SDLC , from design through to deployment. Promote secure coding, security-by-design and

shift-left security

principles. Integrate and optimise security controls within

CI/CD pipelines . Manage and enhance

SAST, DAST, SCA and IAST

capabilities. Configure, support and optimise

Checkmarx

and related application security tooling. Improve security testing, vulnerability management and remediation processes. Provide application security guidance to development and engineering teams. Support cloud-native, containerised and modern application environments. Contribute to application security standards, awareness and continuous improvement initiatives. About the Role This is a senior technical role offering significant autonomy and influence across the organisation's software engineering and cyber security functions. You'll act as a subject matter expert for application security, working closely with Development, Architecture, DevOps and Security teams to improve security maturity and reduce application risk. Required Skills & Experience Experience in

Application Security, DevSecOps or Security Engineering . Strong understanding of secure software development and application security best practice. Experience securing

CI/CD pipelines

and development environments. Hands-on experience with

Checkmarx

or similar security testing tools. Knowledge of

SAST, DAST, SCA

and vulnerability management. Understanding of cloud-hosted applications, containers and modern architectures. Familiarity with

OWASP, ISO27001 and NCSC CAF

frameworks. Strong stakeholder engagement and communication skills. Awareness of software supply chain threats, cloud security and emerging AI-related risks. Exposure to

Prisma Cloud, Cortex or similar platforms

would be advantageous. What's on Offer? £70,000 - £85,000 salary Annual bonus Comprehensive benefits package Remote-first working model Exposure to modern DevSecOps and Application Security technologies Opportunity to shape application security practices across a large-scale enterprise environment

TPBN1_UKTJ