Hybrid App Sec Engineer - PenTesting & DevSecOps

Barclay Simpson is seeking an experienced Application Security Engineer to join its security function in a hybrid role across the UK. The position focuses on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle.

You will perform pre-release manual PenTesting and threat modelling, with strong emphasis on OWASP Top 10, Veracode tooling, and cloud security in Azure or AWS. Kali Linux experience is also valued.