Application Security Engineer

hackajob is partnering directly with Simply Business to hire for this role.

Who Are We?

We insure small businesses and enable big dreams not just for our customers, but for our people and communities too. With over 1,000,000 active insurance policies, we protect builders, bakers, landlords and more than 1,200 other trades.

Were a technology company as well as one that sells insurance. That means we build, we fail, we learn and we improve. Through our global social impact strategy, called 'The Big Dreams Project, we're working to help 10,000 small businesses start or grow by 2030.

Why not check out our advert on YouTube:Simply Business TV advert 2024: 'Simply the Best'.

Job Category

Technology

Position Type

Permanent

Target Openings

1

What Is the Opportunity?

Heres what youll be doing:

Were on a mission to build a tech-forward, secure environment that empowers developers rather than putting roadblocks in their way. As an Application Security Engineer, youll act as a core technical guide across our software development lifecyclehelping us embed security directly into our code and architecture while exploring next-generation defensive strategies like AI/LLM threat modeling.

Unlike security roles where youre isolated or acting as a gatekeeper, here youll be a genuine security champion. Youll partner closely with engineering teams to demystify complex threats, modernise our DevSecOps practices, and mentor developers to build naturally resilient systems.

As one of our Application Security Engineers, youll:

Provide expert guidance on secure coding, threat modelling, and OWASP Top 10 mitigation.

Promote a security-first mindset across development teams, acting as a supportive technical mentor.

Integrate security assessments, code reviews, and penetration testing seamlessly into the SDLC.

Evaluate, implement, and run modern security tooling (SAST, DAST, IAST) to streamline vulnerability checks.

Research emerging AI and LLM threat classes to design proactive, cutting-edge defensive architectures.

Participate in incident response investigations and help deliver engaging security training.

Were looking for someone who is:

Experienced in application securit...