Be at the heart of actionFly remote-controlled drones into enemy territory to gather vital information.

Apply Now

Application Security Engineer (Defender)

Bentley Systems
Greater London
3 weeks ago
Create job alert

Position Summary

:

We are seeking a passionate and skilled Application Security Engineer to join our global Product Security team. As part of a collaborative group of AppSec experts, you’ll play a vital role in protecting our innovative software solutions. This is a unique opportunity to work at the forefront of cybersecurity, helping shape secure development practices across a wide range of technologies—from C#, Typescript, JavaScript, , single-page applications and Electron applications, Azure cloud services, K8s, and more.

Responsibilities:

Conduct manual security code reviews to identify vulnerabilities.


Collaborate with developers to ensure secure design, implementation, and verification of applications.
Provide remediation guidance and actionable recommendations.
Help define and promote Secure Software Development Lifecycle (SSDLC) best practices.
️ Support stakeholders in making risk-based security decisions.
Deliver training sessions and create educational materials for development teams.
️ Build tools and automation to streamline security processes.

Qualifications:

3+ years of experience in software development and security, with a strong focus on manual code review and white-box vulnerability analysis.


Proficiency in reading, writing, and auditing code across multiple languages and platforms.
Strong analytical skills and a passion for software security and secure coding practices.
Experience with web technologies (JavaScript, HTML5, HTTP, REST, SOAP).
Familiarity with programming languages such as .NET Core, , C#, Java, TypeScript, C/C++.
Solid understanding of OWASP Top 10SANS Top 25, and common security flaws.
️ Hands-on experience with cloud technologies (Azure preferred).
Proficiency in containerization using Kubernetes and Docker.
Ability to quickly learn new technologies and conduct independent research

Bonus Points:

Experience with OAuth / OpenID Connect.


Ability to exploit vulnerabilities (, deserialization, HTTP smuggling).
Interest in fuzzing, reverse engineering, and crash analysis.
Relevant certifications such as CCSP, CISSP, CEH, or similar.

What We Offer:

A great Team and culture – please see our colleague video. 


An exciting career as an integral part of a world-leading software company providing solutions for architecture, engineering, and construction - watch this short documentary about how we got our start. 
An attractive salary and benefits package. 
A commitment to inclusion, belonging, and colleague well-being through global initiatives and resource groups. 
A company committed to making a real difference by advancing the world’s infrastructure for a better quality of life, where your contributions help build a more sustainable, connected, and resilient world. Discover our latest user success stories for an insight into our global impact. 

About Bentley Systems



Around the world, infrastructure professionals rely on software from Bentley Systems to help them design, build, and operate better and more resilient infrastructure for transportation, water, energy, cities, and more. Founded in 1984 by engineers for engineers, Bentley is the partner of choice for engineering firms and owner-operators worldwide, with software that spans engineering disciplines, industry sectors, and all phases of the infrastructure lifecycle. Through our digital twin solutions, we help infrastructure professionals unlock the value of their data to transform project delivery and asset performance.

Related Jobs

View all jobs

Application Security Engineer (Defender)

Software Security Engineer

Principal Security Engineer, Autonomous Security

Vulnerability Management Security Engineer

Software Security Engineer

Senior Security Engineer (Product Security)

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Top 10 Skills in Cyber sScurity According to LinkedIn & Indeed Job Postings

In today’s digital age, cyber security is no longer optional—it’s mission-critical. From financial institutions to healthcare providers, government departments to tech startups, every sector in the UK is under rising cyber threats. As a result, employers are constantly on the hunt for skilled professionals who can defend, detect, and respond effectively. But with cyber threats evolving at pace, what exactly are employers seeking? By analysing job postings on LinkedIn and Indeed, this article reveals the Top 10 cyber security skills UK organisations are demanding in 2025. Read on to discover how to present these skills effectively on your CV, in interviews, and through practical proof of experience.

The Future of Cybersecurity Jobs: Careers That Don’t Exist Yet

Cyber security has become one of the most critical issues of our age. Once regarded as a technical problem confined to IT departments, it is now a board-level priority, a government mandate, and a daily necessity for individuals. The shift towards cloud services, remote working, connected devices, and artificial intelligence has dramatically increased the risks of digital attacks. In the UK, cyber security is central to national resilience. The government has identified cyber as a “tier one” threat to national security, alongside terrorism and pandemics. The private sector, from banks to retailers, now sees data breaches and ransomware as existential risks. Global spending on cyber security is projected to exceed $250 billion by 2030, with the UK already home to a thriving cyber industry employing tens of thousands. Yet, as powerful as the industry already is, we are only at the beginning. The technologies shaping the next two decades—AI, quantum computing, edge computing, extended reality, and biotechnology—will radically reshape cyber security. Many of the most vital cyber security jobs of the future don’t exist yet. This article explores why new roles will emerge, the careers likely to appear, how today’s jobs will evolve, why the UK is well-positioned, and how professionals can prepare now.

Seasonal Hiring Peaks for Cybersecurity Jobs: The Best Months to Apply & Why

The UK's cybersecurity sector has emerged as one of the most critical and lucrative technology markets, with roles spanning from security analysts to penetration testers and chief information security officers. With cybersecurity positions commanding salaries from £28,000 for junior security analysts to £140,000+ for senior security architects, understanding when organisations actively recruit can dramatically impact your career trajectory in this essential field. Unlike traditional IT sectors, cybersecurity hiring follows distinct patterns influenced by threat landscapes, regulatory compliance cycles, and incident response requirements. The sector's unique combination of perpetual threat evolution, regulatory pressures, and skills shortages creates predictable hiring windows that strategic professionals can leverage to advance their careers in protecting Britain's digital infrastructure. This comprehensive guide explores the optimal timing for cybersecurity job applications in the UK, examining how cyber threat cycles, compliance deadlines, and government initiatives influence recruitment patterns, and why strategic timing can determine whether you join a cutting-edge security consultancy or miss the opportunity to defend against tomorrow's cyber threats.