> Markdown version of [/jobs/ext/3742844-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/3742844-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Application Security Engineer

- **Company:** Oliver James Global Operations
- **Location:** Manchester, UK
- **Salary:** £40,000.0 - £50,000.0
- **Contract:** Permanent contract
- **Skills:** JavaScript (Programming Language), Application Programming Interfaces (APIs), Artificial Intelligence, Software Applications, Software System Penetration Testing, Microsoft Azure, Black-Box Testing, Software Bug Management, C Sharp (Programming Language), Computer Programming, Continuous Delivery, Continuous Integration, Information Engineering, Github, Python (Programming Language), Microsoft SQL Server, Open Web Application Security, Salesforce.Com, Secure Coding, Software Deployment, SQL Injection, Software Security, Devsecops, Static Application Security Testing, Vulnerability Analysis, Dynamic Application Security Testing
- **Published:** October 15, 2026
- **Apply:** https://www.reed.co.uk/jobs/application-security-engineer/57461814

## About the Role

1+ year in an Application/Security Engineer role (ideally in a fast-paced sales or professional services-based organisation). (AppSec / DevSecOps)

Key Technical Disciplines: Microsoft Azure, Programming Proficiency (JavaScript, Python, MS SQL, C#), Vulnerability Scanning, Penetration Testing, Continuous Integration and Continuous Deployment Pipelines (Azure DevOps or GitHub), OWASP Top 10, Static and Dynamic Application Security Testing, SQL Injection.

Personality metrics: A very strong communicator and proactive team player (friendly, credible, articulate, and proactive) that can work with an ambitious sales force and stakeholders of all levels.

## Description

* Define and implement security testing strategies for AI solutions, utilising both grey box and black box methodologies.
 * Grey Box Testing: Conduct Static Application Security Testing (SAST), dependency scanning, secrets scanning, and configuration reviews.
 * Black Box Testing: Perform Dynamic Application Security Testing (DAST), API fuzzing, authentication testing, and rate-limit tests.
 * AI-Specific Security Tests: Execute prompt injection checks, jailbreaking resistance assessments, tool misuse evaluations, and leakage tests tailored for AI applications.
 * Conduct thorough risk assessments of new and existing applications, identifying vulnerabilities and security gaps.
 * Analyse and interpret security assessment findings, completing remediation efforts in code and verify fixes prior to production deployment.
 * Collaborate with data engineering teams to implement security best practices and ensure secure coding standards.
 * Stay current with emerging threats, vulnerabilities, and industry trends, integrating this knowledge into risk assessment processes.
 * Provide technical guidance and support for incident response efforts related to application security incidents.
 * Conduct quarterly application security reviews to evaluate and validate the effectiveness of security controls.
 * Updating the ticket management system to maintain detailed record of incidents/requests.
 * Security first mentality. Push cyber security standards within the IT team and to the wider group.
 * Maintaining legacy software applications with bug fixes and critical security updates.