Lead Application Security Engineer

£70,000 to 90,000 GBP

Bonus

Hybrid WORKING

Location: Glasgow, Scotland - United Kingdom Type: Permanent

Application Security Engineering Lead
Location: Glasgow or Greater Manchester (2 days per week in your closest site)
Salary: £70,000-£90,000 + bonus DOE
Sponsorship: Not available

About the Role
We're looking for an experienced Application Security Engineering Lead to join a dynamic team driving secure software development across the organisation. In this role, you'll design, implement, and maintain solutions that protect critical systems and sensitive information, while influencing security strategy at a senior level.

This is a hybrid role, offering flexibility to work 2 days per week in your closest site in Glasgow or Greater Manchester.

Key Responsibilities

• Provide subject matter expertise on security systems and engineering patterns.
• Develop protocols, algorithms, and applications to safeguard sensitive data.
• Manage and protect secrets securely, ensuring proper generation, storage, and usage.
• Conduct audits to monitor and assess vulnerabilities, supporting incident response.
• Stay ahead of cryptographic advancements to enable adoption of new technologies.
• Collaborate with developers and security teams to align solutions with business objectives and regulatory requirements.
• Develop, implement, and maintain Identity and Access Management solutions.
• Lead strategic initiatives, advise stakeholders, and influence cross-functional decisions.
• Mentor and guide team members, shaping technical direction and fostering skill development.

Required Experience & Skills

• Strong knowledge of software security, including CVEs, CWEs, and common vulnerability types.
• Hands-on experience with SAST, SCA, and DAST tools.
• Proficiency in at least one programming language (e.g., Java, Go).
• Experience with at least one major cloud platform (AWS, GCP, Azure).
• REST API design and HTTP authentication.
• Linux proficiency, including terminal usage, scripting, and automation (e.g., Shell, Python).

Highly Desirable

• CI/CD experience.
• Knowledge of GraphQL.
• Familiarity with authentication systems (e.g., OAuth).

Why Join?
This is a chance to work at the forefront of application security, influencing technology strategy while protecting critical systems. You'll collaborate with talented colleagues, build secure software practices, and shape the future of security engineering.

Additional Information

• This role is open to UK residents only; visa sponsorship is not available.
• Hybrid working: 2 days per week on-site in Glasgow or Greater Manchester.
• Competitive salary with bonus, depending on experience.