About this role
Salary: £? - ? per year
Requirements: We require 5+ years of experience as an Information Security Researcher or Engineer.We require 3+ years of experience manually auditing source code, or strong programming skills in Java, .NET, Python, or JavaScript frameworks.We require a strong understanding of OWASP Top 10, API security risks, and cloud-native application architecture.We require proven experience in application penetration testing and security code review.We require experience with SAST, DAST, IAST, and SCA tools and processes.We require a solid understanding of CI/CD pipelines and DevSecOps principles. Responsibilities: We will serve as an application security subject matter expert, guiding internal development teams.We will perform code reviews, penetration tests, and architectural reviews on existing and new applications.We will develop, implement, and communicate vulnerability mitigation strategies.We will handle externally reported vulnerabilities.We will drive the static and dynamic application security testing (SAST/DAST) programme.We will advise development teams on secure SDLC best practices. Technologies: APICI/CDCloudDevSecOpsJavaJavaScriptOWASPPythonSecurityASP.NET More:
We are working with a leading technology client on a customer assignment for a Senior Application Security Engineer based in London, UK. This is a 6-month contract at a rate of £575 per day, inside IR35, dependent on experience. The role offers the opportunity to work with a world-class business and gain access to strong learning and development opportunities while collaborating with an exciting customer.
last updated 34 week of 2026