> Markdown version of [/jobs/ext/2841925-senior-application-security-engineer-london](https://www.wearedevelopers.com/jobs/ext/2841925-senior-application-security-engineer-london). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Application Security Engineer - London - **Company:** Additional Resources - **Location:** London, UK - **Experience:** Expert - **Salary:** £25,000.0 - £50,000.0 - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Agile Methodology, Microsoft Azure, Cloud Computing, Cloud Computing Security, Code Review, Cyber Security, Continuous Integration, Github, Python (Programming Language), Systems Development Life Cycle, Secure Coding, Software Engineering, Policy as Code, Software Security, Kubernetes, Azure AKS, Data Management, Terraform, Software Version Control, Devsecops, Security Orchestration, Automation & Response, Static Application Security Testing, Dynamic Application Security Testing - **Published:** September 11, 2026 - **Apply:** https://www.adzuna.co.uk/jobs/details/5878316856 ## About the Role * We are looking for someone who has previously worked as a Senior Application Security Engineer, Lead Application Security Engineer, Principal Application Security Engineer, Application Security Engineer, Senior Product Security Engineer, Product Security Engineer, Senior DevSecOps Engineer, DevSecOps Engineer, Application Security Consultant or in a similar role. * We need hands-on experience embedding application security into the SDLC. * We need experience securing APIs, internet-facing services, and Kubernetes, preferably AKS, and containerised environments. * We need experience working with engineering teams and implementing security testing tools such as SAST, DAST, IAST and SCA. * We need knowledge of security automation, security-/policy-as-code, and secure engineering practices including code review, testing, source control and documentation. * We need familiarity with CI/CD tools such as GitHub and GitHub Actions. * We need strong skills in Terraform and Python. * We need a strong understanding of Azure security controls and cloud security governance. * We need experience with threat modelling in software engineering contexts. * We need knowledge of ISO 27001 and its relevance to secure engineering. * We need familiarity with Agile and DevSecOps methodologies. * You must be eligible to work in the UK. ## Description * We will work closely with engineering and architecture teams to promote secure development from the earliest stages of delivery. * We will implement and maintain application security testing solutions, enabling developers to identify and remediate security risks. * We will enhance secure development processes by integrating security controls throughout CI/CD pipelines. * We will strengthen the security of GitHub Actions and comparable continuous integration and deployment platforms. * We will provide technical guidance on secure API design and protecting externally accessible systems. * We will support the security of Azure cloud infrastructure, including Azure Kubernetes Service (AKS). * We will assist with the protection of cloud-hosted data platforms and associated technologies. * We will develop and maintain security-as-code and policy-as-code using appropriate tooling. * We will automate security processes through infrastructure-as-code and scripting technologies. * We will produce and maintain technical documentation, security procedures and service documentation. * We will support development teams with the adoption and integration of security tooling and best practices. * We will contribute to wider cyber security initiatives, including threat modelling and compliance activities. Technologies: * API * Azure * CI/CD * Cloud * DevSecOps * GitHub * Support * Kubernetes * Python * Security * Terraform ## Related Videos - [Azure-Well Architected Framework - designing mission critical workloads in practice](https://www.wearedevelopers.com/videos/1529-azure-well-architected-framework-designing-mission-critical-workloads-in-practice) - [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon) - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Azure-Well Architected Framework - Cost Optimization in practice](https://www.wearedevelopers.com/videos/2100-azure-well-architected-framework-cost-optimization-in-practice) - [Implementing Feature Environments with AWS and Terraform](https://www.wearedevelopers.com/videos/531-implementing-feature-environments-with-aws-and-terraform) ## Related Articles - [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)