Senior Application Security Engineer

We are working with a leading private equity firm seeking a Cyber Security Engineer to join their London office. This is an exciting opportunity to join a fast-paced, highly regulated environment and play a key role in strengthening cyber security controls across critical business platforms and infrastructure.Key ResponsibilitiesDrive triage and remediation governance for the AI-assisted code audit of proprietary products.Support the rollout of FIDO2/WebAuthn across all privileged accounts with access to proprietary systems and Entra admin roles.Assist with third-party trust boundary reviews.Maintain and enhance the emergency patching runbook for critical vulnerabilities (CVSS 9.0+).Contribute to the micro-segmentation of proprietary applications from general M365 workloads, including honeytoken deployment for early-warning threat detection.Run continuous External Attack Surface Management (EASM) across the firm's external footprint and cross-reference findings weekly with the CMDB.Support SIEM and UEBA enhancements, building detection logic around normal deal workflow behavioural baselines.Skills & ExperiencePrevious experience within Security Operations, Cyber Security Analysis, or Threat Analysis.Experience working within financial services, private equity, or another regulated environmentHands-on experience with SIEM, UEBA, EDR, and identity management technologies including Entra ID, Conditional Access, and FIDO2/WebAuthn.Good understanding of application security vulnerabilities including deserialisation, IDOR, injection, and authorisation logic flaws.Working knowledge of software supply chain security practices, including SBOMs, Software Composition Analysis (SCA), and dependency management.Understanding of DORA ICT risk obligations is desirableSelf-motivated and capable of operating independently within a fast-paced, evolving environment.

#J-18808-Ljbffr