Application Security Engineer - DevSecOps & Secure Coding

Tokio Marine HCC; Greater London; On-site; GBP 60,000 - GBP 80,000; Full time

Job summary

A leading specialty insurer in London is seeking an Application Security Analyst to enhance security measures in the software development lifecycle. The role involves supporting application security testing, validating vulnerabilities, and working closely with development teams to improve secure coding practices. Candidates should have hands-on experience in application security, strong understanding of secure coding principles, and familiarity with CI/CD pipelines. This position offers a competitive salary and a dynamic work environment.

Benefits

Competitive salary

Employee benefit package

Qualifications

• Hands-on experience in Application Security, DevSecOps, or a related security engineering role.
• Strong understanding of common application vulnerabilities, including OWASP Top 10.
• Experience triaging and validating vulnerabilities with development teams.

Responsibilities

• Support application security testing programme using enterprise tools.
• Validate findings and perform manual security reviews across applications.
• Track remediation activities and support timely closure of vulnerabilities.

Skills

Hands-on experience in Application Security

Understanding of secure coding principles

Experience with SAST, SCA, DAST

Ability to read code in C#, JavaScript, or Python

Tools

CI/CD pipelines

GitHub

Azure DevOps

Job description

A leading specialty insurer in London is seeking an Application Security Analyst to enhance security measures in the software development lifecycle. The role involves supporting application security testing, validating vulnerabilities, and working closely with development teams to improve secure coding practices. Candidates should have hands-on experience in application security, strong understanding of secure coding principles, and familiarity with CI/CD pipelines. This position offers a competitive salary and a dynamic work environment.