Application Security Engineering Lead Job at Barclays (Glasgow)

Application Security Engineer

This role is for a senior engineer with hands-on experience in building applicat...

Location

Israel , Tel Aviv

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Expertise of cloud engineering and application security, demonstrated by previous roles in the domain and industry certification
good understanding of security capabilities supporting application development such as authentication, authorization, credential management, certificate management, encryption for on-prem and cloud
understanding of container orchestration technologies
hands-on experience developing high-performance solutions following Agile methodologies ideally backend Java experience
containers K8s hands on experience understanding the lifecycle of a containers and integration with security boundaries-advantage
experience in building end to end solutions for the cloud domain in a secure manner
familiarity with GoLang, Node.js UI authentication is an advantage.

Job Responsibility

Technical engineer working with key stakeholders of cloud engineering and application security experts
explore and resolve key application security gaps and drive their resolutions
develop modules that resolve identified gaps in a centralized optimized manner such as credential management, authentication, authorization, end-to-end scanning tools
act as an advisor and expert lead to various development teams across the company to help them improve their expertise within cloud engineering and application security.

Fulltime

Cloud Application Security Lead

Cloud Application security lead is a Senior VP engineer with hands-on experience...

Location

Israel , Tel Aviv

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Expertise of cloud engineering and application security, demonstrated by previous roles in the domain and industry certification
Good understanding of security capabilities supporting application development such as authentication, authorization, credential management, certificate management, encryption for on-prem and cloud
Understanding of container orchestration technologies
Hands-on experience developing high-performance solutions following Agile methodologies ideally backend Java experience
Containers K8s hands on experience understanding the lifecycle of a containers and integration with security boundaries-advantage
Experience in building end to end solutions for the cloud domain in a secure manner
Familiarity with Java required, advantage - GoLang, Node.js, authentication

Job Responsibility

Technical engineering leadership and hands on development working with key stakeholders of cloud engineering and application security experts
Explore and resolve key application security gaps and drive their resolutions
Develop modules that resolve identified gaps in a centralized optimized manner such as: credential mgmt, authentication, authorization, end to end scanning tools
Act as an advisor and expert lead to various development teams across the company, to help them improve their expertise within cloud engineering and application security

What we offer

Generous holiday allowance starting at 22 days
Private medical insurance packages
Employee Assistance Program

Fulltime

Security Engineering Lead

Citi's Application, Platform and Engineering team is looking for a Security Engi...

Location

United Kingdom , London

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Bring your deep-dive application security engineering expertise from building production systems
thrive in a results-driven environment, where flexibility fuels impact
be a game-changer, ready to step beyond your designated role
love the synergy of pair programming
seize the opportunity to secure AI applications at scale
have a relentless passion to learn more about AI security, LLM attacks, and bringing your knowledge to shape Citi's secure AI future
proven track record of architecting and building secure, large-scale production applications and business-facing platforms from the ground up
hands-on experience finding and exploiting vulnerabilities, conducting red team exercises, and thinking like an attacker to strengthen defenses
experience building security tools and secure production systems with Go, Python, JavaScript
deep experience with HashiCorp Vault for enterprise-scale secrets management

Job Responsibility

Build secure AI products
conduct penetration testing and vulnerability research
design automated security solutions
identify and mitigate AI-specific vulnerabilities
lead security practices in development lifecycles
mentor engineers on secure coding practices.

What we offer

27 days annual leave plus bank holidays
discretional annual performance-related bonus
private medical care and life insurance
employee assistance program
pension plan
paid parental leave
special discounts for employees, family, and friends

Fulltime

Staff Application Security Engineer

As a Staff Application Security Engineer at Culture Amp, you will play a pivotal...

Location

Australia , Melbourne; Sydney

Salary:

Not provided

Culture Amp

Expiration Date

Until further notice

Requirements

Extensive experience in application security engineering, with a proven track record of leading security initiatives in SaaS or cloud-native environments
Deep technical expertise in secure software development, secure coding practices, and common security frameworks (e.g., OWASP Top 10, NIST, PCI, SOC 2)
Proficiency in multiple programming languages (e.g., Ruby, Python, JavaScript, Go) and experience with modern web application architectures and cloud platforms (e.g. AWS)
Strong knowledge of security automation, CI/CD integration, and DevSecOps practices
Experience designing and implementing security tools, frameworks, and processes that scale with developer velocity
Demonstrated ability to lead and influence cross-functional teams, drive change, and deliver results in ambiguous or complex environments
Excellent communication skills, with the ability to explain complex security concepts to technical and non-technical audiences
Experience mentoring and developing engineers, and a passion for building a culture of security and continuous improvement
Familiarity with security-related compliance requirements and standards relevant to SaaS businesses

Job Responsibility

Lead and drive the most complex and high-impact application security reviews, threat modeling, and risk assessments across our product portfolio, providing expert guidance and direction for other team members
Collaborate with engineering, product, and platform teams to embed security into the SDLC, including secure design, code review, and automated security testing (DevSecOps)
Develop and scale security automation, tools, and centralized libraries that enable developers to build secure applications efficiently and at scale
Proactively identify, assess, and address security risks and vulnerabilities in our SaaS environment, including cloud-native and microservices architectures
Own and evolve our vulnerability management programs, ensuring timely triage, remediation, and communication of security issues
Mentor and support engineers across the organization, fostering a culture of security awareness, knowledge sharing, and continuous learning
Influence and drive cross-functional security initiatives, partnering with compliance, privacy, and infrastructure teams to meet regulatory and customer requirements (e.g., SOC 2, ISO 27001, OWASP)
Stay current with the latest security threats, technologies, and best practices, and advocate for their adoption within Culture Amp
Represent Culture Amp’s security expertise internally and externally, including supporting customer security reviews and contributing to the broader security community

What we offer

Employee Share Options Program
Programs, coaching, and budgets to help you thrive personally and professionally
Access to external providers for mental wellbeing and coaching support
Monthly Camper Life Allowance
Team budgets dedicated to team building activities and connection
Intentional quarterly wellbeing pauses
Extended year-end breaks
Excellent parental leave and in work support program available from day 1
5 Social Impact Days a year
MacBooks for you to do your best & a work from home office budget

Staff Application Security Engineer

As a Staff Application Security Engineer at Culture Amp, you will play a pivotal...

Location

Australia , Sydney

Salary:

Not provided

Culture Amp

Expiration Date

Until further notice

Requirements

Extensive experience in application security engineering, with a proven track record of leading security initiatives in SaaS or cloud-native environments
Deep technical expertise in secure software development, secure coding practices, and common security frameworks (e.g., OWASP Top 10, NIST, PCI, SOC 2)
Proficiency in multiple programming languages (e.g., Ruby, Python, JavaScript, Go) and experience with modern web application architectures and cloud platforms (e.g. AWS)
Strong knowledge of security automation, CI/CD integration, and DevSecOps practices
Experience designing and implementing security tools, frameworks, and processes that scale with developer velocity
Demonstrated ability to lead and influence cross-functional teams, drive change, and deliver results in ambiguous or complex environments
Excellent communication skills, with the ability to explain complex security concepts to technical and non-technical audiences
Experience mentoring and developing engineers, and a passion for building a culture of security and continuous improvement
Familiarity with security-related compliance requirements and standards relevant to SaaS businesses

Job Responsibility

Lead and drive the most complex and high-impact application security reviews, threat modeling, and risk assessments across our product portfolio, providing expert guidance and direction for other team members
Collaborate with engineering, product, and platform teams to embed security into the SDLC, including secure design, code review, and automated security testing (DevSecOps)
Develop and scale security automation, tools, and centralized libraries that enable developers to build secure applications efficiently and at scale
Proactively identify, assess, and address security risks and vulnerabilities in our SaaS environment, including cloud-native and microservices architectures
Own and evolve our vulnerability management programs, ensuring timely triage, remediation, and communication of security issues
Mentor and support engineers across the organization, fostering a culture of security awareness, knowledge sharing, and continuous learning
Influence and drive cross-functional security initiatives, partnering with compliance, privacy, and infrastructure teams to meet regulatory and customer requirements (e.g., SOC 2, ISO 27001, OWASP)
Stay current with the latest security threats, technologies, and best practices, and advocate for their adoption within Culture Amp
Represent Culture Amp’s security expertise internally and externally, including supporting customer security reviews and contributing to the broader security community

What we offer

Employee Share Options Program
Programs, coaching, and budgets to help you thrive personally and professionally
Access to external providers for mental wellbeing and coaching support
Monthly Camper Life Allowance
Team budgets dedicated to team building activities and connection
Intentional quarterly wellbeing pauses
Extended year-end breaks
Excellent parental leave and in work support program available from day 1
5 Social Impact Days a year
MacBooks for you to do your best & a work from home office budget

Fulltime

Senior Frontend Engineer (Application Security)

At Easygo, our DevSecOps team is at the heart of our engineering, security and o...

Location

Australia , Melbourne

Salary:

Not provided

Easygo Gaming

Expiration Date

Until further notice

Requirements

Bachelor's/Master's degree in Computer Science or equivalent practical experience
7+ years of hands-on experience in software engineering, with a primary focus on security engineering
Strong understanding of code architecture and design principles
Excellent problem-solving skills and the ability to thrive in a fast-paced, dynamic environment
Strong communication skills for effective collaboration with teams and stakeholders
Analytical mindset to address complex technical challenges and devise innovative solutions
Positive attitude and eagerness to learn new technologies to grow as a security engineer

Job Responsibility

Lead by example, and drive the adoption of secure software development lifecycle (SSDLC) practices. This includes performing threat modelling, providing secure coding guidance to development teams, and embedding security requirements early in the design phase
Own, improve, execute and manage various security tests, including SAST, DAST, and SCA, to identify vulnerabilities. Analyse test results and prioritise findings. Fix what you find, and work with developers to ensure timely remediation
Implement and maintain automated security controls within the CI/CD pipeline. This involves integrating security tools to enable continuous security testing and monitoring, making security an integral part of the DevSecOps process
Deploy and configure Web Application Firewalls (WAFs) and Runtime Application Self-Protection (RASP) solutions to protect from real-time attacks. Respond to urgent application security incidents as needed
Take ownership of the platform vulnerability management program. This involves tracking, prioritising, and remediation of security flaws found in applications, ensuring all vulnerabilities are addressed and verified
Actively engage in hands-on coding, testing, debugging, and troubleshooting to ensure code quality, scalability, and maintainability
Write efficient, scalable, and maintainable code, adhering to coding standards and best practices
Innovate within the team by pushing for improvements and driving constructive changes to enhance team performance and efficiency
Analyse complex problems and provide effective solutions, contributing to team goals and initiatives
Lead and independently complete medium-sized projects or initiatives from start to finish

What we offer

Access to over 9,000 courses across our Learning and Development Platform
EAP access for you and your family
Be rewarded with lucrative annual bonuses
Give back with a paid volunteer day
Fuel your day with daily breakfast and open pantries brimming with unlimited snacks and refreshments, all on the house
Break up the week with on site remedial massage Wednesdays
In house full-time barista’s providing you your daily coffee needs
Weekly team lunches and happy hour in the office from 4pm on Fridays
Enjoy a bustling office with the option for up to 2 days work from home per week
Fun office environment with pool tables, table tennis and all your favourite gaming consoles

Fulltime

Application Security Engineer

Location

Salary:

Not provided

Ryz Labs

Expiration Date

Until further notice

Requirements

Minimum 3-5 years of experience in secure software development, Security Architecture, threat modeling, or related roles
Relevant Professional certifications such as CISSP, OSCP, GWEB, CREST-CWAT or similar are highly desirable

Job Responsibility

Work as an internal security consultant to help product & engineering teams understand the security risk and advise them on best practices
Design and implement secure architecture solutions for applications and systems
Conduct threat modeling exercises to identify and mitigate potential security threats
Document and communicate threat modeling findings and recommendations
Perform periodic Security Assessments and code reviews to ensure compliance with SSDLC practices
Perform proactive research to detect new attack vectors and pentest internal and external apps
Implement security controls and best practices within CI/CD pipelines. Automate the security testing tools and processes within the CD/CI pipeline
Develop security tools and security metrics
Manage and Oversee vulnerability disclosure program by coordinating with external researchers to validate and triage reported vulnerabilities
Develop and maintain security standards and guidelines for application development

Senior Application Security Engineer

As an Application Security - Senior Product Security Engineer, you will play a c...

Location

United States

Salary:

157000.00 - 216000.00 USD / Year

AlphaSense

Expiration Date

Until further notice

Requirements

5+ years of experience in Application or Product Security, preferably in a SaaS or cloud-native environment
Strong understanding of web app and API security, microservices, and containerized architectures
Experience integrating security tooling into modern CI/CD workflows
Proficiency with SAST, DAST, IaC scanning, and container security platforms
Skilled in secure coding and code review for at least one major language (Python, Java, Go, JavaScript)
Familiarity with AWS security, Kubernetes security, and DevSecOps best practices

Job Responsibility

Lead application security initiatives across all SaaS products and microservices
Conduct threat modeling, architecture reviews, and secure code assessments for both backend and frontend systems
Implement and manage security automation in CI/CD, integrating SAST, DAST, SCA, and container image scanning tools
Collaborate with engineering teams to triage, prioritize, and remediate vulnerabilities across applications and containerized workloads
Drive AppSec awareness and training, developing secure coding practices and guidelines
Evaluate and deploy container security controls, ensuring images and orchestrators (Kubernetes, ECS, etc.) follow best practices
Support bug bounty and vulnerability disclosure programs and coordinate penetration testing
Stay ahead of emerging application and container threats, and recommend preventive controls aligned with OWASP and CIS benchmarks

What we offer

Competitive compensation, benefits, and career growth opportunities
Opportunity to shape and drive product security strategy
Collaborative and security-minded engineering culture
Work on cutting-edge security challenges in a fast-growing company
Performance-based bonus
Equity
Generous benefits program

Fulltime

Application Security Engineering Lead

Barclays

Location:
United Kingdom , Glasgow ▼
Knutsford

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:
December 23, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Application Security Engineering Lead

Application Security Engineer

Cloud Application Security Lead

Security Engineering Lead

Staff Application Security Engineer

Staff Application Security Engineer

Senior Frontend Engineer (Application Security)

Application Security Engineer

Senior Application Security Engineer

Application Security Engineering Lead

Barclays

Location:United Kingdom , Glasgow ▼Knutsford

Category:IT - Software Development

Contract Type:Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:December 23, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Application Security Engineering Lead

Application Security Engineer

Cloud Application Security Lead

Security Engineering Lead

Staff Application Security Engineer

Staff Application Security Engineer

Senior Frontend Engineer (Application Security)

Application Security Engineer

Senior Application Security Engineer

Location:
United Kingdom , Glasgow ▼
Knutsford

Category:
IT - Software Development

Contract Type:
Not provided

Job Posted:
December 23, 2025