Senior Application Security Engineer

About the role

Redgate is looking for a Senior Application Security Engineer to embed security expertise across its fast‑moving product teams. You will work in a flexible hybrid model from Cambridge, partnering with engineers to define security standards, run threat modelling and guide secure delivery.

Key responsibilities

• Partner directly with engineering and product teams to define and operationalise security requirements throughout the full software development lifecycle.
• Own or co‑own application security governance, including secure‑by‑default standards, patterns, guardrails and risk exceptions.
• Lead threat modelling for new features and architectural changes, translating findings into practical engineering work.
• Drive SAST/DAST adoption and quality, from tool tuning to severity calibration and developer‑facing triage guidance.
• Support product teams adopting AI technologies such as LLMs, SLMs and MCP, providing security insight into emerging workloads.

Required profile

• Hands‑on product or application security experience, embedding security practices across a modern software development lifecycle.
• Ability to review code and communicate security issues clearly to developers, primarily within a C# ecosystem, with exposure to Java or Python.
• Strong knowledge of the OWASP Top 10 and practical mitigation patterns.
• Experience implementing or improving SAST/DAST processes, including tool tuning, triage workflows and reducing signal‑to‑noise.
• Working understanding of cloud and container security fundamentals, ideally with AWS and Docker.

Required skills

• C#
• Java
• Python
• OWASP Top 10
• SAST
• DAST
• AWS
• Docker

What we offer

• Salary range £60,000‑£75,000, dependent on experience.
• Hybrid working: home and Cambridge office, with flexible in‑office expectations.
• Monthly wellbeing allowance and generous paid time off.
• Private health insurance and strong investment in learning, development and career progression.