Specialists who ensure the security of software applications. A critical role in the defence against cyber threats, combining technical expertise with a deep understanding of application vulnerabilities.
Application Security Engineers play a vital role in the cyber security landscape by identifying and mitigating vulnerabilities in software applications. They work closely with development teams to integrate security into the software development lifecycle (SDLC), ensuring that applications are robust and resilient against attacks. This role is in high demand across various sectors, including finance, healthcare, and technology, where the protection of sensitive data is paramount.
A typical week is split between code reviews, vulnerability assessments, and collaborating with developers to implement security measures.
Based on advertised midpoints across the 10 UK listings priced in pounds in the last 12 months. Base salary only.
% of 10 listings posted in the last 12 months that mention each skill, extracted from job descriptions.
A typical UK progression for application security engineers. Years are guidance — strong people move faster, and many senior folks sidestep into research, product or management.
Assists in code reviews and vulnerability assessments, learning the fundamentals of application security.
Leads code reviews and vulnerability assessments, and collaborates with development teams to implement security measures.
Takes ownership of complex security projects, mentors junior engineers, and advises on security strategy.
Drives the overall security vision, leads major initiatives, and influences organisational security policies.
There's no single route, but most people follow some version of these steps.
Start with foundational knowledge in programming, networking, and security principles.
Work on real-world projects, such as code reviews and vulnerability assessments, to apply your knowledge.
Focus on application security frameworks, tools, and best practices to deepen your expertise.
Consider certifications like Certified Secure Software Lifecycle Professional (CSSLP) or Offensive Security Certified Professional (OSCP) to validate your skills.
Take on leadership roles, guiding teams and driving security improvements across the organisation.
Shape the overall security strategy, influencing organisational policies and driving innovation in application security.
Adecco Warwick £65,000 – £75,000 pa
Embed security into the software development lifecycle, partnering with engineering teams to improve secure coding and conduct application security assessments. Support DevSecOps initiatives, identify vulnerabilities before release, and strengthen security within CI/CD pipelines across a growing technology estate.
MYO Talent Warwickshire £60,000 – £75,000 pa
Embed security throughout the software development lifecycle, driving a shift-left approach and integrating automated security controls into CI/CD pipelines. Work closely with development and DevOps teams to identify vulnerabilities early, improve secure coding practices and enhance application security tooling, using tools such as Checkmarx.
Additional Resources London £80,000 – £90,000 pa
Do you have a background in Application Security, DevSecOps or Product Security, with hands-on experience embedding application security into the SDLC If so, this could be an opportunity worth considering.Join a well-established health research organisation and charity supporting large-scale medical...
Cloudflare London
Design, build and operate distributed systems behind Cloudflare's Application Security products (WAF, Page Shield, API Shield) at internet scale, using Go or Rust and devops tooling like Kubernetes and Kafka. The role includes reviewing RFCs and code, on-call shifts, and mentoring other engineers.
The locations with the most live listings for this role today.
Essential skills include programming, knowledge of security frameworks, experience with vulnerability assessment tools, and a strong understanding of the software development lifecycle.
Gain experience in software development or IT security, specialise in application security, and consider relevant certifications to demonstrate your expertise.
Working hours can vary, but most roles follow a standard 9-to-5 schedule. However, some roles may require on-call availability for incident response.
Salaries vary based on experience and location. For more detailed salary information, please refer to the salary section on this page.
Post your role in 90 seconds and reach the specialist audience that already reads this page.
