> Markdown version of [/jobs/ext/2476719-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/2476719-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Application Security Engineer

- **Company:** DGH Recruitment
- **Location:** London, UK
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), JavaScript (Programming Language), .NET Framework, Application Programming Interfaces (APIs), Amazon Web Services, Software System Penetration Testing, JIRA, Burp Suite, Code Coverage, Programming Tools, Github, Python (Programming Language), OAuth, Open Source Technology, Cloud Services, Web Application Security, Software Engineering, Datadog, Sonatype, Software Security, Veracode, Gitlab, Kubernetes, Checkmarx, Purple Team (Cyber Security), Docker, Static Application Security Testing, Dynamic Application Security Testing
- **Published:** August 14, 2026
- **Apply:** https://www.totaljobs.com/job/application-security-engineer/dgh-recruitment-job107843299

## About the Role

Experienced in application security focussing on red, blue or purple team activities

 - Experienced in software development or experience contributing to Open-Source projects
 - Experienced with DAST tools such as Burp Suite, OWASP Zap or similar
 - Experience with SAST/SCA tools such as Snyk, Veracode, Checkmarx or similar
 - Proficient in one or more of the following languages - Python, JavaScript, .NET or Java
 - Demonstrated experience with development tools including GitLab/GitHub, Datadog, Jira, Docker, and various IDEs

Desirable Skills / Experience:

 - Experience with cloud services, particularly AWS services like WAF, Cognito etc
 - Experience working with Infrastructure as Code, Kubernetes and Containers
 - Experience with auth mechanisms like Open ID Connect, OAuth and identity providers

## Description

DGH Recruitment are currently recruiting on behalf of a leading global client in the financial services industry who are looking for an Application Security Engineer to join the team on a permanent basis.

They are looking for an individual that speaks the language of developers, thrives within a purple team space and has a passion for automation.

The role will work alongside engineering and IT teams to enhance application security, API's and infrastructure by implementing preventative controls and identifying risks through testing.

Responsibilities:

 - Act as a security champion to foster the secure by design approach
 - Support the identification and analysis of web application security vulnerabilities
 - Oversee daily management of application security platforms to maintain coverage, compliance and remediation of findings
 - Conduct threat modelling and review application architectures
 - Implement application security controls and proactive measures to prevent security incidents
 - Implement and manage SAST / SCA tooling across application repositories to identify source code risks
 - Scale automated DAST solutions across applications to maximise testing coverage
 - Carry out penetration testing on internally developed applications


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray)
- [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next)
- [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect)
- [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders)
- [Bringing AI Model Testing and Prompt Management to Your Codebase with GitHub Models](https://www.wearedevelopers.com/videos/1536-bringing-ai-model-testing-and-prompt-management-to-your-codebase-with-github-models)

## Related Articles

- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london)
- [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)