Senior Application Security Engineer

The role

You will embed security expertise into engineering teams by setting standards and running threat modelling. You will define and operationalise security requirements throughout the SDLC.

What you will do

• Partner directly with engineering and product teams to define and operationalise security requirements across the full SDLC
• Own or co-own application security governance: secure-by-default standards, patterns, guardrails, and risk exceptions
• Lead threat modelling for new features and architectural changes, turning findings into practical engineering work
• Drive SAST/DAST adoption and quality, from tool tuning to severity calibration and developer-facing triage guidance
• Support product teams adopting AI, including LLMs, SLMs, and MCP

Required qualifications

• Hands-on product or application security experience, embedding security practices across a modern software development lifecycle
• Ability to review code and communicate security issues clearly to developers, primarily within a C# ecosystem
• Exposure to Java or Python
• Strong knowledge of the OWASP Top 10 and practical mitigation patterns
• Experience implementing or improving SAST/DAST processes: tool tuning, triage workflows, and reducing signal to noise
• Working understanding of cloud and container security fundamentals

Nice to have

• AWS and Docker

Benefits

• Monthly wellbeing allowance
• Generous paid time off
• Genuine investment in learning, development, and career progression
• Private health insurance

Before you apply

• Your application will be reviewed by a person

About the company

Redgate builds solutions that help data professionals securely manage the data and databases their organisations depend on. They operate in an environment built on trust, accountability, and collaboration.