Application Security Engineer (F/M)

We are looking for an Application Security Engineer (F/M) to join our engineering team and help us build security into the software development lifecycle. This role is an opportunity to move beyond traditional vulnerability management and drive a proactive approach to application security. You will work closely with software engineers, architects, DevOps and security teams to automate security controls, integrate security into CI/CD pipelines, improve secure development practices and help teams build secure-by-design applications.

Your responsibilities: Own and continuously improve the application security posture of internally developed solutions, ensuring security is embedded throughout the software development lifecycle (SDLC). Monitor, assess, prioritise, and manage application security vulnerabilities identified through penetration testing, SAST, DAST, dependency scanning, bug bounty programmes, and other security assessment activities, ensuring remediation within agreed SLAs. Triage security findings to determine business risk, remediation requirements, and false positives, providing clear technical justification for all decisions.

Design, recommend and implement long-term, scalable security controls and automation to reduce recurring vulnerabilities, minimise manual intervention, and improve remediation efficiency across development teams. Drive a shift-left security approach by integrating automated security testing, policy enforcement, and secure development practice