Application Security Engineer

The role

A Cyber Security Engineer will improve application security across the cloud-native technology estate. The role focuses on creating developer-friendly security guardrails and supporting engineering teams with threat modelling and vulnerability remediation.

What you will do

• Improve developer-friendly security guardrails across GitHub-based CI/CD pipelines, application repositories and engineering workflows
• Work with SAST, software composition analysis, secret scanning, vulnerability management and secure coding guidance
• Support practical threat modelling
• Triage application vulnerabilities
• Improve security playbooks
• Help teams remediate issues in a pragmatic way

Required qualifications

• Practical experience in application security
• Experience working with software engineers to explain and remediate security issues
• Familiarity with common web application security risks and secure coding practices
• Experience with vulnerability triage, prioritisation and remediation tracking
• Experience using or interpreting findings from tools such as SAST, software composition analysis, secret scanning or similar
• Experience participating in or supporting threat-modelling activities
• Ability to write scripts or small tools, ideally in Python, to automate tasks or improve visibility
• Strong communication and collaboration skills
• Familiarity with Agile or Scrum ways of working

Nice to have

• Exposure to AWS security, cloud security or infrastructure-as-code security
• Experience with Terraform or CloudFormation
• Experience with container or Kubernetes security
• Experience with bug bounty, penetration testing or security testing programmes
• Experience with Splunk or similar logging/SIEM platforms
• Exposure to AI security, such as LLM-enabled applications, AI-assisted development workflows or prompt/data leakage risks
• Experience building dashboards, metrics or reports to support vulnerability management
• Relevant security certifications or training, such as AWS security training, secure coding training, GIAC, ISC2, CREST or equivalent practical experience

Benefits

• Generous annual leave
• Medical cover
• Inclusive parental leave packages
• Subsidised gym memberships
• Opportunities to give back to the community

About the company

The Financial Times is a leading news organisation globally recognised for its authority, integrity and accuracy. It aims to deliver quality information and services worldwide.