Senior Security Engineer, Application Security

About the role

Join a small information security group to protect infrastructure, applications and cloud systems. The role focuses on building and running application security practices across a regulated healthcare technology environment.

What you will do

• Guide application security practices across the whole software development lifecycle
• Work with engineering teams to embed security in architecture, design, coding, testing and release
• Carry out hands-on security testing of web apps, APIs, cloud services and infrastructure
• Add and refine automated security checks in CI/CD pipelines, covering static analysis, dependency and secret scanning, containers and dynami
• Assess security tooling effectiveness, cut noise and reduce friction for developers
• Write secure coding guidance aimed at developers and support incident response and vulnerability management

What they look for

• At least four years in application, product or software security as an individual contributor, or software engineering experience followed b
• Solid grasp of application security flaws and attack methods, including OWASP Top 10 and API risks
• Ability to inspect application architecture and source code for security gaps
• Experience wiring application security tools into modern CI/CD workflows
• Knowledge of authentication, authorization, sessions, cryptography, secrets handling and secure API design, plus cloud platforms such as AWS

Nice to have

• Interest in exploring and adopting emerging technology not widely available

Benefits

• Monthly social committees for company events
• 18 vacation days, 9 company holidays and 5 sick days