Application Security Engineer

Application Security Engineer (12-Month Fixed-Term Contract)

Salary - £85,000 + Discretionary Bonus + 15 Non-contributory pension

Hybrid working - x3 days per week in Edinburgh

Spencer Rose are partnered with a leading automotive organisation who are currently on the look out for an Application Security Engineer on a 12 month FTC. Within this role, the Application Security Engineer will be working closely with engineers, architects, and product teams to provide practical security guidance from design through to deployment.

The Application Security Engineer will have the following responsibilities -

• Review designs and lead threat modelling activities.
• Advise on secure application, API, cloud, and integration architectures.
• Embed security into development pipelines and engineering practices.
• Assess, prioritise, and support remediation of vulnerabilities.
• Coordinate penetration testing and security assessments.
• Evaluate SaaS platforms and third-party integrations.
• Collaborate with Security Operations, IAM, and Cloud Security teams.
• Contribute to security standards, governance, and best practices.

The Application Security Engineer will need to have experience in -

• Application or Product Security experience
• Experience across Threat Modelling and Secure by Design
• Security Testing and Vulnerability Management
• Security Risk Assessment
• Secure Software Development
• Strong understanding of application and API security.
• Experience with architecture reviews and threat modelling (e.g. STRIDE).
• Hands-on experience with SAST, SCA, secrets detection, API security, and container/infrastructure scanning.
• Familiarity with cloud platforms, CI/CD pipelines, and containerised environments.
• Strong stakeholder management and communication skills.

Experience with Java/Spring Boot, React, Node.js, Snowflake, Salesforce, Kubernetes/OpenShift, Snyk, or Wiz is desirable but not essential.