Application Security Engineer - Build Secure SDLC (Hybrid)

Tesco; Welwyn Garden City; Hybrid; GBP 55,000 - 75,000; Full time

Job summary

A major UK retailer is looking for a Security Engineer to enhance their Application Security efforts. The ideal candidate will have strong programming skills in Python or Java, experience in secure code review, and a deep understanding of application security practices. This role involves identifying effective security tooling and delivering training to teams. The position offers a hybrid working model and a comprehensive benefits package including annual bonuses and health insurance.

Benefits

Annual bonus scheme

25 days holiday plus personal day

Private medical insurance

24/7 virtual GP service

Qualifications

• Strong expertise in at least one programming language such as Python, Java, or JavaScript.
• Experience in secure code review.
• Deep understanding of application security across web, API, and mobile.

Responsibilities

• Identify security toolsets to uncover issues in code.
• Provide domain expertise throughout the software development lifecycle.
• Deliver training on application security products.

Skills

Strong expertise in programming languages

Proficient in secure code review

Experience deploying security tooling

Deep understanding of application security

Knowledge of OWASP Top 10

Education

Relevant bachelor's degree or equivalent experience

Tools

Application Security Tooling (SCA/SAST/DAST/IaC Security)

DevOps toolsets

Job description

A major UK retailer is looking for a Security Engineer to enhance their Application Security efforts. The ideal candidate will have strong programming skills in Python or Java, experience in secure code review, and a deep understanding of application security practices. This role involves identifying effective security tooling and delivering training to teams. The position offers a hybrid working model and a comprehensive benefits package including annual bonuses and health insurance.