Security Engineer, Application Security

Writer

. Conduct threat modeling sessions with product teams .

Posted 11/4/2026full-timeLondon • United KingdomMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in application security engineering with a focus on secure architecture design, threat modeling, and vulnerability management. Proficient in integrating security practices within CI/CD pipelines and fostering collaboration across teams to enhance security measures.

Highest-signal resume keywords

Application Security EngineeringSAST/DAST ScanningSecurity Code ReviewsProgramming Languages (Python, Java, Go, JavaScript/TypeScript)DevSecOps Practices

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Threat ModelingSecure Architecture DesignVulnerability ManagementAutomation for SecuritySecurity Testing FrameworksSecurity Controls ImplementationAI/ML Security ResearchPenetration TestingCode ReviewReusable Security Patterns

Soft Skills

Excellent CommunicationBuilder's MindsetCollaboration

Tools & Technologies

CI/CD PipelinesVulnerability Management PlatformsSecurity ToolsAI Agents

Industry Keywords

Application SecuritySecurity AssessmentsGenerative AI Attack VectorsSecure Coding StandardsDeveloper Workflows

Tech Stack

Tools & technologies

JavaJavaScriptPythonTypeScriptGo

About the role

Key responsibilities & impact

Conduct threat modeling sessions with product teams
Design secure architectures for new features and embed security considerations into product decisions
Own and evolve the application security program
Establish and maintain SAST/DAST scanning in CI/CD pipelines
Conduct security code reviews for critical changes
Build automation to identify vulnerabilities before production
Establish and champion secure coding standards
Create reusable security patterns and libraries
Design and recommend security features and products for customer environments
Integrate and leverage AI agents to increase security-team and engineering velocity
Lead security assessments and penetration testing of applications, AI services, and APIs
Identify vulnerabilities and collaborate with teams on remediation at scale
Design and implement security controls for data pipelines, model training environments, and customer-facing AI agents
Research emerging AI/ML, LLM, and generative-AI attack vectors and build proactive defenses
Report to the head of security engineering

Requirements

What you’ll need

4+ years of hands-on experience in application security engineering, with a proven track record of securing large-scale production systems
Understanding of developer experience and developer workflows for shipping features and products
Technical expertise in at least two programming languages (Python, Java, Go, JavaScript/TypeScript)
Ability to read and review code across multiple languages, understanding both business logic and security implications
Knowledge of security tools and methodologies including SAST/DAST solutions, vulnerability management platforms, security testing frameworks, and DevSecOps practices
Excellent communication skills to translate complex security concepts into clear recommendations for technical and non-technical audiences
A builder's mindset focused on automation, scalability, and empowering engineering teams
Alignment with WRITER's values of Connect, Challenge, and Own

Benefits

Comp & perks

Generous PTO, plus company holidays
Comprehensive medical and dental insurance
Paid parental leave for all parents (16 weeks)
Fertility and family planning support
Competitive pension scheme and company contribution
Annual work-life stipends
Wellness stipend for gym, massage/chiropractor, personal training, etc.
Learning and development stipend
Company-wide off-sites and team off-sites
Competitive compensation and company stock options