Lead Security Engineer

We’re partnering with a large, complex financial services organisation to hire an Application Security Engineering Lead to help embed security into modern software development at scale.

This role sits close to engineering teams, shaping secure‑by‑design patterns, improving how vulnerabilities are identified and remediated, and influencing security strategy across cloud‑based platforms and APIs.

• Act as a subject matter expert on application security and secure engineering practices
• Help teams design and build secure services, APIs, and cloud‑native applications
• Lead and improve the use of SAST, DAST, and SCA tools across the SDLC
• Identify vulnerabilities, support remediation, and contribute to security audits and reviews
• Influence standards around secrets management, IAM, and authentication
• Collaborate closely with developers, platform teams, and security stakeholders

• Strong knowledge of application security fundamentals (CVEs, CWEs, common attack vectors)
• Hands‑on experience with secure coding in at least one language (e.g. Java, Go, Python)
• Experience working with cloud platforms (AWS, Azure, or GCP)
• Understanding of REST APIs, HTTP auth, and modern identity patterns
• Comfortable working in Linux environments, including scripting and automation
• Bonus: CI/CD security, OAuth, Graph
  
  QL, or Dev Sec Ops  experience

• High‑impact position influencing security across critical systems
• Balance of hands‑on technical work and strategic leadership
• Strong internal visibility and long‑term growth opportunities
• Competitive salary and hybrid working model

If you’re an application security specialist who wants to shape how secure software is built, rather than just react to issues, this is well worth a conversation.

• Mid‑Senior level

• Full‑time

• Finance