Senior Application Security Engineer

About the role

We are looking for a Senior Application Security Engineer who will embed security practices, tools, and automation into our development workflows. You will partner with engineering teams to deliver secure‑by‑design applications and CI/CD pipelines at scale.

Key responsibilities

• Collaborate with development teams to improve secure software delivery across applications and CI/CD pipelines.
• Support triage and remediation of application security findings, providing practical guidance and secure refactoring recommendations.
• Facilitate threat‑modeling activities and translate outcomes into actionable risk‑reduction measures.
• Design and maintain secure‑by‑default delivery patterns, reusable templates, and reference implementations.
• Drive adoption of centrally managed security tooling and automated controls.
• Develop integrations and automation for security validation, audit‑evidence generation, and operational metrics.
• Work with platform, architecture, and security teams to enhance processes, tooling, and delivery capabilities.
• Communicate security guidance, standards, and best practices to stakeholders.

Required profile

• 5+ years of experience in application security, software engineering, or product security.
• BS in Engineering, Computer Science, or equivalent practical experience.
• Strong understanding of CI/CD security, pipeline controls, identity and access management, and secrets handling.
• Proven ability to integrate automated security tooling into software delivery workflows.
• Excellent collaboration, communication, analytical, and problem‑solving skills.

Required skills

• Application security principles and secure coding practices.
• CI/CD security and pipeline automation.
• Identity and access management (IAM) and secrets management.
• Security automation, compliance support, and audit‑evidence generation.
• Threat modeling and risk‑reduction techniques.

What we offer

• Flexible working hours to support work‑life balance.
• Wellbeing initiatives, shared parental leave, study assistance, and sabbatical options.
• Opportunities to influence security practices across multiple engineering teams.