Application Security Engineer Job at Bugcrowd (Brighton)

Application Security Engineer

At JFrog, we’re running the software that runs the world – and we want you alo...

Location

Israel , Netanya/Tel Aviv

Salary:

Not provided

JFrog

Expiration Date

Until further notice

Requirements

Experience in AppSec And Product Security
Deep Knowledge in Application security and Vulnerabilities
Strong coding/scripting background (e.g., Python, Go, Java, JavaScript)
Hands-on experience with CI/CD pipelines, security tools, and DevSecOps practices
Familiarity with modern architectures (e.g., Cloud, microservices, containers, Kubernetes)
Understanding of software development processes and secure coding principles
Strong communication and collaboration skills

Job Responsibility

Assist in the development of internal security tools and AI agents
Support the design and implementation of SSDLC practices and automated security controls across the CI/CD pipeline
Contribute to building and operating scalable vulnerability management frameworks across cloud-native services and SaaS products
Integrate security into Agile and DevOps processes, including threat modeling, SAST, DAST, and SCA
Develop Internal application security Tools and Automations
Partner with development and DevOps teams to embed security early and often
Contribute to secure code reviews and assist with remediation strategies
Track, triage, and report vulnerabilities across product lines
Support the adoption of secure development best practices

Security and Application Security Engineer

Beacon Technologies is seeking a Security and Application Security Engineer. The...

Location

United States , Las Vegas

Salary:

Not provided

Beacon Technologies

Expiration Date

Until further notice

Requirements

Minimum of five years of Information Security experience with at least two years of application-level security
Strong communication skills: ability to convey and document security guidelines, requirements, and coding best practices
Familiarity with Security Best Practices in common coding languages
Application Penetration Testing / API Security Testing
Software Development Life Cycle Design and Implementation
Static and Dynamic Application Testing Tools and Methods
Container and orchestration security (Kubernetes, Docker, Octopus, GitHub, etc.)
Familiarity with Application Security Testing Frameworks such as OWASP
Strong logical and analytical thinker
exceptional skills in security systems solutions

Job Responsibility

Operate as a liaison between the Security Team and the Development Teams
Preserve PCI and SOX Security Certification programs with a primary focus on ensuring compliance with the appropriate industry standards and security controls
Supporting incident response and architecture review whenever applications security expertise is needed
Integrating threat modeling practices into the SDLC
Work with other staff to perform periodic scans and evaluation of system security including areas such as patch management, penetration testing, vulnerability assessments, and other types of InfoSec-related tasks
Assist in identifying and communicating security exposures, information security incidents or non-compliance situations to IT management or the CISO as appropriate. Duties may also include collecting and documenting cyber security and incident response event data as necessary.

What we offer

Career advancement opportunities
extensive training
excellent benefits including paying for health and dental premiums for salaried employees.

Fulltime

Application Security Engineering Lead

Join us at Barclays as an Application Security Engineering Lead, where you'll de...

Location

United Kingdom , Glasgow; Knutsford

Salary:

Not provided

Barclays

Expiration Date

Until further notice

Requirements

Experience with the software security landscape: CVEs, CWEs, common software vulnerability types
Experience with SAST, SCA, and DAST, including the strengths and weaknesses of each
At least one programming language (e.g. Java, Go)
At least one major cloud provider (e.g. AWS, GCP, Azure)
Experience with REST API design
Experience with HTTP Authentication
Experience with Linux at the terminal, including scripting and automation (e.g. shell, Python)

Job Responsibility

Provision of subject matter expertise on security systems and engineering patterns
Development and implementation of protocols, algorithms, and software applications to protect sensitive data and systems
Management and protection of secrets, ensuring that they are securely generated, stored, and used
Execution of audits to monitor, identify and assess vulnerabilities in the banks infrastructure/software and support the response to potential security breaches
Identification of advancements in to support the innovation and adoption of new cryptographic technologies and techniques
Collaboration across the bank, including developers and security teams, to ensure that cryptographic solutions align with business objectives, security policies and regulatory requirements
Development/ Implementation and maintenance of Identity and Access Management solutions and systems

What we offer

Competitive holiday allowance
Life assurance
Private medical care
Pension contribution

Fulltime

Senior Application Security Engineer II

As a Senior Application Security Engineer, you will drive security initiatives t...

Location

United States , Seattle

Salary:

152850.00 - 244560.00 USD / Year

Axon

Expiration Date

Until further notice

Requirements

Proficiency in programming languages like Python, Java, Go, or C#
Strong experience with modern development workflows, including CI/CD pipelines and Git-based version control
In-depth understanding of vulnerabilities and secure coding practices
Hands-on experience with security tools like Snyk, Semgrep, or similar
Ability to simplify and communicate technical security concepts to diverse audiences
Demonstrated success in partnering with developers to integrate security without disrupting velocity
Experience performing secure code reviews and interpreting SAST/DAST results
Familiarity with cloud platforms (AWS, Azure, GCP) and containerization (Docker, Kubernetes)

Job Responsibility

Integrate Security into Development
Build and maintain security automation tools to seamlessly embed security checks into CI/CD pipelines
Partner with engineering teams to design secure-by-default architectures and workflows
Enable Developer Success
Act as a trusted advisor and partner for development teams, providing actionable guidance to address security
Deliver training and mentorship on secure coding practices, empowering teams to proactively prevent vulnerabilities
Proactively Identify Risks
Deploy and operationalize static (SAST), dynamic (DAST), and dependency (SCA) scanning tools
Lead vulnerability management efforts, ensuring critical vulnerabilities are identified, prioritized, and remediated
Advocate for a "security debt" reduction mindset to maintain long-term product integrity

What we offer

Competitive salary and 401k with employer match
Discretionary paid time off
Paid parental leave for all
Medical, Dental, Vision plans
Fitness Programs
Emotional & Mental Wellness support
Learning & Development programs
Snacks in our offices

Fulltime

Senior Application Security Engineer

As an Application Security - Senior Product Security Engineer, you will play a c...

Location

United States

Salary:

157000.00 - 216000.00 USD / Year

AlphaSense

Expiration Date

Until further notice

Requirements

5+ years of experience in Application or Product Security, preferably in a SaaS or cloud-native environment
Strong understanding of web app and API security, microservices, and containerized architectures
Experience integrating security tooling into modern CI/CD workflows
Proficiency with SAST, DAST, IaC scanning, and container security platforms
Skilled in secure coding and code review for at least one major language (Python, Java, Go, JavaScript)
Familiarity with AWS security, Kubernetes security, and DevSecOps best practices

Job Responsibility

Lead application security initiatives across all SaaS products and microservices
Conduct threat modeling, architecture reviews, and secure code assessments for both backend and frontend systems
Implement and manage security automation in CI/CD, integrating SAST, DAST, SCA, and container image scanning tools
Collaborate with engineering teams to triage, prioritize, and remediate vulnerabilities across applications and containerized workloads
Drive AppSec awareness and training, developing secure coding practices and guidelines
Evaluate and deploy container security controls, ensuring images and orchestrators (Kubernetes, ECS, etc.) follow best practices
Support bug bounty and vulnerability disclosure programs and coordinate penetration testing
Stay ahead of emerging application and container threats, and recommend preventive controls aligned with OWASP and CIS benchmarks

What we offer

Competitive compensation, benefits, and career growth opportunities
Opportunity to shape and drive product security strategy
Collaborative and security-minded engineering culture
Work on cutting-edge security challenges in a fast-growing company
Performance-based bonus
Equity
Generous benefits program

Fulltime

Application Security Engineer

Location

Salary:

Not provided

Ryz Labs

Expiration Date

Until further notice

Requirements

Minimum 3-5 years of experience in secure software development, Security Architecture, threat modeling, or related roles
Relevant Professional certifications such as CISSP, OSCP, GWEB, CREST-CWAT or similar are highly desirable

Job Responsibility

Work as an internal security consultant to help product & engineering teams understand the security risk and advise them on best practices
Design and implement secure architecture solutions for applications and systems
Conduct threat modeling exercises to identify and mitigate potential security threats
Document and communicate threat modeling findings and recommendations
Perform periodic Security Assessments and code reviews to ensure compliance with SSDLC practices
Perform proactive research to detect new attack vectors and pentest internal and external apps
Implement security controls and best practices within CI/CD pipelines. Automate the security testing tools and processes within the CD/CI pipeline
Develop security tools and security metrics
Manage and Oversee vulnerability disclosure program by coordinating with external researchers to validate and triage reported vulnerabilities
Develop and maintain security standards and guidelines for application development

Application Security Engineer II

In this role, you will support Rackspace's application security program by imple...

Location

India

Salary:

Not provided

Rackspace

Expiration Date

Until further notice

Requirements

2-4 years in the information security field
Experience working with application security, security testing, or DevSecOps practices
Working knowledge of the SDLC, security concepts, and vulnerability assessment methodologies
Hands-on experience with or understanding of programming and scripting languages including one or more of the following: Python, Java, Node.js, Go, Ruby, PHP
databases such as SQL
and related tools such as Github, Gitlab, Jenkins, and CircleCI
Understanding of common vulnerabilities, remediation approaches, and industry-standard classification schemes (CVE, CWE, CVSS, OWASP Top 10)
Familiarity with relevant compliance regulations, such as PCI-DSS, ISO 27001, SOC 2, or HIPAA
Passion for security and eagerness to learn about new technologies and emerging security vulnerabilities
Strong communication skills with the ability to work collaboratively across teams

Job Responsibility

Execute application security testing using both automated tools and manual testing techniques on web applications, APIs, containers, and other software components
Configure, maintain, and operate SAST, DAST, and other application security testing tools
Analyze and triage security findings, documenting clear remediation guidance for development teams
Support the vulnerability reporting process and track findings through to resolution
Assist with triage and validation of external vulnerability disclosures and bug bounty reports
Contribute to the development and documentation of application security processes and standards
Participate in security code reviews and threat modeling exercises
Help track and report metrics for application security program health
Collaborate with development and DevOps teams to integrate security into CI/CD pipelines
Stay current with application security trends, tools, and best practices

Fulltime

Security Engineer, Application Security

Figure is an AI Robotics company developing a general purpose humanoid. Our huma...

Location

United States , San Jose

Salary:

150000.00 - 350000.00 USD / Year

Figure

Expiration Date

Until further notice

Requirements

Experience in several of the following application security domains: penetration testing, vulnerability research, security assessment, secure coding practices, security architecture & design, hardware security
Strong software engineering (not scripting or automation) skills in C/C++, Rust, Golang, Python or similar
Experience with securing embedded systems, including secure boot, secure identity, OTA, or others
Solid foundation in web security, mobile security, or cryptography
Ability to collaborate with internal and external stakeholders whilst prioritizing tasks and work independently under minimal supervision.
BS in Computer Science, Engineering, Information Systems, or equivalent years of experience in a related technical field
3+ years of experience in the field of application security or related security role
Passion for learning and helping others
Excellent verbal and written communication skills, with high attention to detail

Job Responsibility

Conduct security assessments of applications, embedded systems, back-end services, and business integrations, as well as build tooling for a secure development lifecycle
Design technical solutions to mitigate security weaknesses on the robot and our service stack. Work with teams across the company to implement them.
Build frameworks and systems to prevent classes of vulnerabilities
Hunt for vulnerabilities and insecure coding patterns on our product stack (backend services and robot internal systems)
Be a champion for security and user privacy

Fulltime

Application Security Engineer

Bugcrowd

Location:
United Kingdom , Brighton

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:
January 05, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Application Security Engineer

Application Security Engineer

Security and Application Security Engineer

Application Security Engineering Lead

Senior Application Security Engineer II

Senior Application Security Engineer

Application Security Engineer

Application Security Engineer II

Security Engineer, Application Security

Application Security Engineer

Bugcrowd

Location:United Kingdom , Brighton

Category:IT - Software Development

Contract Type:Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:January 05, 2026

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Application Security Engineer

Application Security Engineer

Security and Application Security Engineer

Application Security Engineering Lead

Senior Application Security Engineer II

Senior Application Security Engineer

Application Security Engineer

Application Security Engineer II

Security Engineer, Application Security

Location:
United Kingdom , Brighton

Category:
IT - Software Development

Contract Type:
Not provided

Job Posted:
January 05, 2026