> Markdown version of [/jobs/ext/2813219-senior-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/2813219-senior-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Application Security Engineer - **Company:** The Clear - **Location:** Greater London, UK - **Experience:** Expert - **Salary:** £170,000.0 - £215,000.0 - **Contract:** Permanent contract - **Skills:** Software System Penetration Testing, Burp Suite, Mobile Application Development, Code Review, Continuous Integration, DevOps, Open Web Application Security, Systems Development Life Cycle, Secure Coding, Security Software, Mobile Security, Software Engineering, Software Security, Metasploit, Static Application Security Testing, Dynamic Application Security Testing - **Published:** September 10, 2026 - **Apply:** https://www.collegerecruiter.com/job/2840589713-senior-application-security-engineer ## About the Role * 5+ years in software development with security integration into SDLC processes; 2+ years of architecture experience. * Expert knowledge of OWASP Top 10 or CWE Top 25 testing, including PoCs and secure code remediation. * Excellent communication skills to explain technical topics. * Strong understanding of Software Security Architecture, SDLC, and CI/CD. * Experience with application security tools (DAST, SAST, IAST, RASP, WAF). * Familiarity with PCI, NIST 800-53, FedRAMP, and ISO27001. * Experience with security testing tools like Burp Suite, Metasploit, and OWASP ZAP. * Experience with mobile platform security concepts for iOS & Android. ## Description We are seeking a Senior Application Security Engineer to enhance our team and elevate our application security testing. You will be responsible for penetration testing, remediation, and creating automated security products to empower secure software delivery across CLEAR. What you'll do: * Collaborate with Product, Software Engineering, DevOps, and IT teams. * Perform security risk assessments, manual penetration testing, automate security testing, threat modeling, and conduct secure coding education. * Deliver security products and consult with DevOps, supporting automated security testing in CI/CD pipelines. * Lead internal/external penetration tests, triage issues, and drive remediation. * Develop functional and non-functional security requirements. * Conduct security assessments, code reviews, and penetration tests to identify vulnerabilities. * Implement and manage security tools like SAST, DAST, and SCA. How you'll measure success: * Effective security implementation within the SDLC. * Implementation of automated security testing. * Effective partnerships with engineering, DevOps, and product teams. * Continuous improvement of application security programs. ## Related Videos - [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment) - [ Secure Code Superstars: Empowering Developers and Surpassing Security Challenges Together](https://www.wearedevelopers.com/videos/422-secure-code-superstars-empowering-developers-and-surpassing-security-challenges-together) - [#90DaysOfDevOps - The DevOps Learning Journey](https://www.wearedevelopers.com/videos/548-90daysofdevops-the-devops-learning-journey) ## Related Articles - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)