Application Security Engineer

Application Security Engineer – AppSec & AI Security Location: London, London, United Kingdom Employment Type: Full-time Overview Application Security Engineer responsible for embedding security throughout the software development lifecycle across globally distributed technology teams. The role combines application security reviews, threat modelling, secure coding, vulnerability management and emerging AI/LLM security. Key Responsibilities

• Define security requirements and controls across complex technology environments.
• Lead application security reviews, including threat modelling, architecture and design reviews, security consultations and code reviews.
• Identify and address application vulnerabilities throughout the SDLC.
• Assess security risks in AI-enabled applications and services, including common AI/LLM vulnerabilities.
• Use AI tools and security agents to improve vulnerability analysis and developer enablement.
• Champion secure development practices across engineering teams.
• Translate security principles into practical guidance for technical and non-technical stakeholders.
• Partner with globally distributed development teams across different technologies, languages and methodologies.
• Educate and coach engineers on secure coding and application security best practices.
• Collaborate with technology and business stakeholders to drive sustainable security improvements.
• Balance defensive security practices with an offensive mindset when assessing application vulnerabilities. Requirements
• Strong application security experience in complex technology environments.
• Experience defining security controls independently of specific platforms or technologies.
• Detailed knowledge of the OWASP Top 10 and application security controls.
• Experience with secure coding and application security tools, including SCA, SAST and secrets detection.
• Experience identifying and remediating vulnerabilities throughout the SDLC.
• Experience securing AI-enabled applications and understanding AI/LLM security vulnerabilities.
• Strong threat modelling, security review and code review capabilities.
• Excellent communication and stakeholder management skills.
• Experience guiding and developing software engineers on security best practices.
• Strong learning mindset and interest in emerging application security technologies.