Application Security Engineer

Application Security Engineer Overview

Join Rightmove as an Application Security Engineer, where you will be the first engineering hire in our expanding Application Security team, reporting directly to the Lead Application Security Engineer. Your role will involve collaborating with engineering teams to enhance our application security capabilities, focusing on security tooling, vulnerability management, secure design, and threat modeling.

Key Responsibilities

• Support the rollout and management of application security tools across engineering repositories, including SAST, SCA, and secrets detection.
• Triage and classify security findings, ensuring effective remediation of vulnerabilities.
• Oversee daily vulnerability management operations, including monitoring and engaging with engineering teams.
• Provide guidance to engineers on resolving vulnerabilities and requesting exceptions.
• Assist in managing cloud security posture through Prisma Cloud, including findings triage and monitoring.
• Establish a risk-based engagement schedule with engineering teams based on SLA compliance.
• Triage inbound security requests according to the AppSec triage SLA.
• Conduct security reviews for new services, integrations, and RFCs, including API security assessments.
• Review and respond to penetration testing and third-party integration requests.
• Facilitate threat modeling sessions and improve practices within engineering teams.
• Maintain process documentation and runbooks as the function matures.
• Support regular review processes such as access reviews and vulnerability audits.

Requirements

• Practical experience in application security, security engineering, or a related hands-on security role.
• Able to assess security findings in context and provide pragmatic recommendations to engineering teams.
• Working proficiency in Python for internal tooling.
• Experience with DAST/SAST/SCA/secrets scanning tools like Aikido, Snyk, Semgrep, or Checkmarx.
• Familiarity with Prisma Cloud or similar cloud-native security platforms.
• Comfortable reading code and understanding CI/CD pipelines.
• Experience in conducting or contributing to threat modeling exercises.
• Strong written communication skills and the ability to manage a high volume of requests independently.

Benefits

• Cash plan for dental, optical, and physiotherapy treatments.
• Private medical insurance, pension plan, and life insurance.
• Employee assistance program.
• 27 days of annual leave plus two paid volunteering days, with options for holiday purchase.
• Contributory stakeholder pension scheme.
• Life assurance at 4x your basic salary for beneficiaries.
• Competitive salary package.
• Paid leave for maternity, paternity, adoption, and fertility purposes.
• Travel loans, bike-to-work scheme, and rental deposit loans.
• Charitable contributions through payroll giving and donation matching.
• Access to discounts on travel, electronics, fashion, gym memberships, and more.

At Rightmove, we foster a friendly and supportive work environment, emphasizing collaboration and inclusivity. We are committed to diversity and believe that a diverse workforce enhances innovation and productivity. If you are interested in this opportunity, please apply through our website.

Degree Requirement: Not Specified

Visa Sponsorship May be