Application Security Engineer

About This Opportunity

We are representing a fast-growing insurtech organization that is reshaping the motor insurance industry through data-driven innovation and customer-centric technology. Our client operates across multiple European markets and serves millions of customers with their digital-first platform.

We're seeking an Application Security Engineer to join their Security Engineering Team in London. This is a full remote position open to candidates located in the UK, Italy, or Spain. You'll work alongside a 350+ strong engineering department, collaborating with software development, infrastructure, operations, and security professionals to deliver scalable, impactful solutions.

Responsibilities

• Define security requirements and design application architectures following a secure-by-default approach
• Conduct threat modeling, code reviews, and penetration testing on cloud-based web and mobile applications to proactively identify vulnerabilities
• Implement, manage, and automate SAST/DAST/SCA security controls and WAF rules to enforce protection at scale
• Partner with Product teams to ensure robust protection and foster a security-first development culture
• Participate in the investigation, management, and resolution of security alerts
• Collaborate on all core activities and initiatives of the Security Engineering team
• Participate in on-call shifts to guarantee 24x7 security monitoring and support

What We're Looking For

Required skills and experience:

• Strong knowledge of web/mobile security vulnerabilities, AI security risks, and industry standards (e.g., OWASP Top 10, CWE)
• Hands-on experience with threat modeling frameworks (e.g., STRIDE), code reviews, penetration testing, and SAST/DAST/SCA tools
• Proficiency in scripting/programming (e.g., Python, Rust) and experience with CI/CD systems and Infrastructure as Code (e.g., Pulumi)
• Availability for on-call shifts to support 24x7 security monitoring
• Self-motivated and proactive problem-solver with strong English communication skills
• Experience working in Agile environments

Nice-to-have qualifications:

• Practical experience with secure AWS design/implementation and Kubernetes (EKS) security
• Hands-on experience with WAF configurations (e.g., Cloudflare) and EDR, SIEM, or SOAR platforms
• Relevant industry certifications (e.g., OSCP, OSWA/E, BSCP, PWPA/E, eWPT, or similar)
• Active involvement in security research, bug bounty programs, or CTF competitions

How We Work With You

When you apply through Get A Job.ai, our talent team will review your application and conduct an initial screening. If there's a strong match, we'll submit your profile to our client for consideration. Please do not contact the client directly—all communication should go through Get A Job.ai to ensure a smooth process for everyone involved.

Our client offers excellent benefits including full flexibility to work from home, the office, or a hybrid arrangement, plus the option to work from anywhere for up to 30 days per year. You'll have access to learning resources, mentorship, tailored growth plans, private healthcare, gym discounts, wellbeing programs, and mental health support.

Pay

Compensation details will be discussed during the screening process with our recruiting team.

Equal Opportunity: Get A Job.ai is committed to creating an inclusive recruitment process. We welcome candidates from all backgrounds and experiences. If you need accommodations during the application process, please let us know.