Security Engineer II - Application Security

Tesco PLC
Welwyn Garden City, UK
3 months ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Compensation
£41,600.0
Working hours
Regular working hours
Job source

Tech stack

Java (Programming Language) JavaScript (Programming Language) Application Programming Interfaces (APIs) DevOps Python (Programming Language) Software Engineering Software Security Free and Open-Source Software Microservices

Job description

An exciting opportunity to join a leading company and play an influential part in their continued dedication to Application Security. At Tesco, the application security team’s strategy is to provide security tooling that fits seamlessly into software engineering teams ways of working, helping them find and deal with security problems early within the software development process before it reaches production. In this role you will be responsible for helping to identify appropriate toolsets that fit with the application security team’s strategy, provide comprehensive guidance that allow engineering teams to effectively self-serve with our toolsets and help manage and maintain the chosen solutions. You will be responsible for

  • Help identify security toolsets that effectively uncover security issues in open source software and first party code
  • Provide domain expertise on all areas of security and privacy throughout the Software Development lifecycle
  • Work in-line with agile practices i.e. scrum
  • Be able to identify gaps in software engineering practices and recommend appropriate streamlined security solutions
  • Ability to deliver training on core application security products to both security and engineering teams
  • Write comprehensive guidance for the selected security tooling
  • Provide technical support for our products

Requirements

  • Proficient in one of the following programming languages: Python, JavaScript, Java
  • Experience of deploying security tooling into a DevOps environment
  • Deep understanding of application security (Web, API, Mobile)
  • An understanding of microservices and container orchestration

Benefits & conditions

  • Annual bonus scheme of up to 20% of base salary.
  • Holiday starting at 25 days plus a personal day (plus Bank holidays).
  • Private medical insurance.
  • 26 weeks maternity and adoption leave (12 months service required at the qualifying date) at full pay, followed by 13 weeks of Statutory Maternity Pay or Statutory Adoption Pay, we also offer 6 weeks fully paid paternity leave.
  • Free 24/7 virtual GP service, Employee Assistance Programme (EAP) for you and your family, free access to a range of experts to support your mental wellbeing.
  • This information is a shortened summary, refer to our policies for full details.

About the company

You might know us as a supermarket, technology company or even for our award-winning mobile network. Truth is, we’re all of those things, and much more. Our colleagues work with one goal in mind, helping to make every day a little better for our customers, colleagues and communities all over the world. No two customers are the same, neither are our colleagues. At Tesco, we champion a balance that lets you thrive both in and out of work. Spend 60% of your week collaborating with colleagues at our office locations or local sites and the rest remotely. Whether you’re just kicking off your career, juggling passions, or navigating big life events, we’re here to support you. We always welcome a conversation about flexible working, so talk to us throughout your application about how we can support. We’re proud to be an accredited Disability Confident Leader, where everyone’s welcome. That’s why we commit to providing a fully inclusive and accessible recruitment

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on totaljobs.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

3:22 min

Transitioning from software engineering to security roles

Anna Oliveira · Coffee With Developers

2:17 min

Mapping the maturity roadmap for scaled devops adoption

Dominik Krichbaum Dominik Krichbaum · WWC Europe 2026

3:07 min

Transitioning architecture to microservices at Netflix

Steve Upton Steve Upton · WWC 2022

1:30 min

The universal and shared team responsibility of software security

Julia Wilson Julia Wilson +1 · WWC 2025

1:22 min

Addressing the shortage of application security specialists

Joseph Katsioloudes Joseph Katsioloudes · WWC 2025

3:18 min

Scaling global network engineering through DevOps culture

Stuart Clark · LIVE

Videos

See all

Related articles

See all