> Markdown version of [/jobs/ext/4096107-senior-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/4096107-senior-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Application Security Engineer - **Company:** G-P - **Location:** London, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** JavaScript (Programming Language), Artificial Intelligence, Amazon Web Services, Software System Penetration Testing, Code Review, Computer Programming, Linux, Intrusion Detection and Prevention, Python (Programming Language), Log Analysis, Software Vulnerability Management, Web Testing, Web Platforms, Scripting, Large Language Models, Software Security, Information Technology, Patch Management, Web Technologies, Restful APIs, Terraform, Automation Anywhere, Docker, Static Application Security Testing, Dynamic Application Security Testing - **Published:** October 15, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=0b630ffc11fdad85 ## About the Role * Education:BS (or higher) in Computer Science or related field, or equivalent work experience. * Experience: 3+ years of experience in application security with any combination of the following: threat modeling experience, secure design reviews, code reviews, pen-testing * Excellent communication skills and business acumen * Proficiency in coding/scripting languages (e.g., Python, Go etc.). * Web application penetration testing experience (CTFs, Bug Bounty, etc) * Amazon Web Services (AWS) security and engineering knowledge and experience * Experience with developing or testing web application technologies * Nice to have security certifications (OSCP, OSWP, eCPPT, eWPT, Security+, etc) * Experience with Linux, Docker, Terraform, and programming against REST APIs ## Description As an Senior Application Security engineer , you will support G-P's application security program, ensuring the safety of both web platforms and integrated AI/LLM systems. You will evaluate web technologies and AI workflows using enterprise-grade tools, enforce AI security guidelines, and coordinate remediation efforts with engineering teams. What you will do: * Participate in threat modeling exercises with engineering team members for application and AI-driven architectures * Triage SCA/SAST/DAST/CSPM findings by eliminating false positives and providing well-vetted vulnerabilities to engineering teams * Support vulnerability management efforts for networks and infrastructure * Partner with engineering teams ensuring timely remediation of security findings * Perform security assessments, reviews, and internal penetration tests * Support application security programs and security team initiatives * Develop scripts and tools to automate repetitive security tasks, such as log analysis, patch management, and incident detection. * Build custom solutions to integrate security tools with existing systems using languages like Python, JavaScript, or Go.