Application Security Specialist

Shape the Future of Secure Software Development Across a Leading Enterprise Organisation

Competitive Salary + Bonus + Car Allowance + Benefits | London | Hybrid Working

Join a growing Cyber, Risk & Security team and play a pivotal role in strengthening the security of products, platforms and services delivered across a complex European technology environment.
As an Application Security Specialist, you'll be a key member of the Secure Development Centre of Excellence (CoE), partnering with engineering teams to embed security throughout the software development lifecycle. You'll drive a security-first culture, influence development standards, and help deliver secure, resilient applications for both internal and customer-facing solutions.

Key Responsibilities:

Application Security & Assurance

• Lead application security reviews for high-risk products and services.


• Conduct and oversee SAST, DAST, fuzz testing and API security assessments.


• Perform architecture, design and code security reviews.


• Assess applications against OWASP Top 10 and other industry standards.


• Translate findings into practical remediation plans and developer guidance.

Secure Development & DevSecOps

• Support the development of secure coding standards across technologies including Java, C and C++.


• Embed security throughout the Software Development Lifecycle (SDLC).


• Design and support secure CI/CD pipeline patterns.


• Integrate SAST, DAST, SCA and security tooling into development workflows.


• Support automation of security controls and assurance activities.

Security Leadership & Developer Enablement

• Act as a subject matter expert for Application Security across the organisation.


• Deliver secure coding training, workshops and awareness sessions.


• Mentor development teams and promote security-first engineering practices.


• Drive adoption of secure development standards and methodologies.

Threat & Vulnerability Management

• Support application vulnerability management activities.


• Assist development teams with vulnerability triage and remediation planning.


• Identify recurring weaknesses and opportunities for continuous improvement.


• Monitor emerging threats, vulnerabilities and industry trends.

Secure AI Development

• Support the adoption of secure development practices for AI-enabled applications.


• Assist with controls relating to AI model security, data handling and misuse risks.


• Help development teams securely adopt emerging technologies.

Essential Experience:

• 3-5 years' experience within Application Security, Secure Development, or Software Engineering with a security focus.


• Hands-on experience conducting application security reviews and assessments.


• Strong knowledge of application security principles and secure coding practices.


• Experience working with SAST, DAST and Software Composition Analysis (SCA) tools.


• Experience integrating security controls into CI/CD pipelines.


• Strong understanding of OWASP Top 10 and common vulnerability classes.


• Experience with API and web application security.


• Knowledge of threat modelling techniques and methodologies.


• Experience working closely with software engineering teams in enterprise environments.


• Ability to read and understand code in languages such as Java, C, C++, C#, Python or similar.


• Strong understanding of shift-left security and secure development lifecycle practices.

Highly Desirable Skills:

• Fuzz testing and advanced dynamic testing techniques.


• Manual code review experience.


• DevSecOps implementation and security automation.


• Experience integrating SAST, DAST, SCA and secrets scanning tools.


• Cloud-native, microservices and serverless architecture security.


• Secure AI and data-driven application security.


• OWASP SAMM, ASVS or other security maturity frameworks.


• Experience building or supporting a Security Centre of Excellence.


• Experience working within multinational or multi-entity organisations.


• Delivery of developer-focused security training and workshops.

Qualifications:

Essential

• Degree or equivalent professional experience in:
  
  
  • Computer Science
  
  
  • Software Engineering
  
  
  • Cyber Security
  
  
  • Information Security
  
  
  • Or a related technical discipline.
  
  


• Formal training, certification or demonstrable experience within Secure Development or Application Security.

Desirable

• CSSLP (Certified Secure Software Lifecycle Professional).


• GWAPT or GWEB.


• OSCP or equivalent Offensive Security certifications.


• Microsoft Azure Security Engineer Associate.


• AWS Security Specialty.


• Google Professional Cloud Security Engineer.


• DevSecOps or CI/CD related certifications.


• ISO 27001 certifications.


• NIST CSF and NIST SSDF knowledge.

Package & Benefits

• Competitive salary


• Annual bonus


• Car allowance


• Hybrid working


• Comprehensive benefits package


• Ongoing training and professional development


• Industry-recognised certification support


• Exposure to enterprise-scale application security programmes


• Opportunity to work with modern cloud, DevSecOps and AI technologies


• Clear career progression within a growing cyber security function