Future Tech Jobs Future Tech Jobs

Application Security Engineer Jobs

Specialists who ensure the security of software applications. A critical role in the defence against cyber threats, combining technical expertise with a deep understanding of application vulnerabilities.

Open roles
2
Hiring companies
2
View 2 live roles → Get an alert

Application Security Engineers play a vital role in the cyber security landscape by identifying and mitigating vulnerabilities in software applications. They work closely with development teams to integrate security into the software development lifecycle (SDLC), ensuring that applications are robust and resilient against attacks. This role is in high demand across various sectors, including finance, healthcare, and technology, where the protection of sensitive data is paramount.

What the role does

Inside the role of an Application Security Engineer

A typical week is split between code reviews, vulnerability assessments, and collaborating with developers to implement security measures.

  1. 01
    Conduct code reviews to identify security flaws
  2. 02
    Perform vulnerability assessments and penetration testing
  3. 03
    Collaborate with developers to integrate security into the SDLC
  4. 04
    Monitor and respond to security alerts and incidents
  5. 05
    Document findings and provide recommendations for improvement
Skills & tools

What hiring managers ask for

% of 3 listings posted in the last 12 months that mention each skill, extracted from job descriptions.

Cloud Security
100%
Application Security
67%
DevSecOps
67%
Kubernetes
67%
API Security
67%
SAST
67%
DAST
67%
IAST
67%
SCA
67%
Terraform
67%
Python
67%
GitHub Actions
67%
Career ladder

From Junior to Principal

A typical UK progression for application security engineers. Years are guidance — strong people move faster, and many senior folks sidestep into research, product or management.

  1. Level 1

    Junior Application Security Engineer

    0–2 yrs

    Assists in code reviews and vulnerability assessments, learning the fundamentals of application security.

  2. Level 2

    Application Security Engineer

    2–5 yrs

    Leads code reviews and vulnerability assessments, and collaborates with development teams to implement security measures.

  3. Level 3

    Senior Application Security Engineer

    5–8 yrs

    Takes ownership of complex security projects, mentors junior engineers, and advises on security strategy.

  4. Level 4

    Principal Application Security Engineer

    8+ yrs

    Drives the overall security vision, leads major initiatives, and influences organisational security policies.

Pathway

How to become a Application Security Engineer

There's no single route, but most people follow some version of these steps.

  1. 1

    Learn the basics

    Start with foundational knowledge in programming, networking, and security principles.

  2. 2

    Gain practical experience

    Work on real-world projects, such as code reviews and vulnerability assessments, to apply your knowledge.

  3. 3

    Specialise in application security

    Focus on application security frameworks, tools, and best practices to deepen your expertise.

  4. 4

    Obtain relevant certifications

    Consider certifications like Certified Secure Software Lifecycle Professional (CSSLP) or Offensive Security Certified Professional (OSCP) to validate your skills.

  5. 5

    Lead security initiatives

    Take on leadership roles, guiding teams and driving security improvements across the organisation.

  6. 6

    Influence security strategy

    Shape the overall security strategy, influencing organisational policies and driving innovation in application security.

Live jobs

2 live roles

Senior Application Security Engineer - DevSecOps & Cloud Security

This role involves embedding security into the software development lifecycle by collaborating with engineering teams to design and implement secure cloud-native applications. The engineer will integrate security into CI/CD pipelines, strengthen API and Kubernetes security, and automate controls using security-as-code and infrastructure-as-code practices. The position focuses on proactive security enablement rather than traditional vulnerability management, with a strong emphasis on Azure, GitHub Actions, and secure development tooling.

Additional Resources London, United Kingdom £70,000 – £80,000 pa
Hybrid Permanent
Amazon logo

Security Engineer, Amazon Application Security

This role involves conducting application security reviews, designing secure architectures, and performing threat modeling to protect Amazon’s global products and services. The engineer will provide security guidance, develop documentation, deliver metrics, and lead training for internal teams. The position emphasizes innovation, ownership, and solving complex security challenges at scale in a cloud-first environment.

Amazon London, United Kingdom
Hybrid Permanent
Hiring locations

Where this role is hiring

The locations with the most live listings for this role today.

London

Location
2 open
FAQs

Common questions

  • Essential skills include programming, knowledge of security frameworks, experience with vulnerability assessment tools, and a strong understanding of the software development lifecycle.

  • Gain experience in software development or IT security, specialise in application security, and consider relevant certifications to demonstrate your expertise.

  • Working hours can vary, but most roles follow a standard 9-to-5 schedule. However, some roles may require on-call availability for incident response.

  • Salaries vary based on experience and location. For more detailed salary information, please refer to the salary section on this page.

Hiring application security engineers?

Post your role in 90 seconds and reach the specialist audience that already reads this page.

Post a job → See pricing

🍪 Basic, anonymous analytics (aggregate counts only, never shared) are always on. Accept to also enable third-party tools — Google Analytics, Microsoft Clarity, Mixpanel, Leadfeeder — which help us match you with relevant Cyber Security roles. We never sell your data or use it for cross-site advertising. See our Cookie Policy.