Application Security Engineer

About the role

We are seeking an Application Security Engineer to join our Manchester‑based AppSec Engineering team. Cytix provides a platform that threat‑models development tickets and creates security testing plans, combining manual and automated testing. The role moves beyond traditional web‑application constraints, focusing on continuous penetration testing integrated directly into customers' Software Development Life Cycle (SDLC). You will work closely with both internal developers and external clients to drive security testing initiatives.

Key responsibilities

• Operate as a Security Consultant specialising in Application Security (AppSec) testing.
• Perform penetration testing of web applications, APIs, and mobile applications for clients across various industries.
• Collaborate with technical and non‑technical stakeholders to identify vulnerabilities and guide remediation.
• Conduct risk reviews of application changes as part of continuous security testing.
• Work closely with developers and external customers to ensure security findings are addressed.

What we offer

• Share options – if Cytix succeeds, you benefit too.
• Unlimited holidays.
• Enhanced maternity and paternity pay.
• Pension contribution of 8% (3% employer, 5% employee).
• Private healthcare through Vitality, including dental, optical and hearing.
• Work from anywhere (remote).
• Birthday day off.
• Octopus car scheme – electric car via salary sacrifice.
• Inclusive culture where you can be yourself.