Application Security Engineer

Coventry | Hybrid, 3 days onsite

A great opportunity for an Application Security Engineer to join a large scale enterprise security programme, working across Azure, AWS and emerging AI platforms to strengthen application, API and cloud security governance.

What you'll do

• Administer and optimise Azure WAF and AWS WAF policies and controls
• Run application security assessments across web apps, APIs and cloud native services
• Strengthen API security, authentication and access management practices
• Support secrets and key management (Azure Key Vault, AWS KMS)
• Embed security controls into CI/CD pipelines and DevSecOps processes
• Support AI security governance, risk and compliance activity across AI enabled platforms

What you'll need

• Application, cloud or cybersecurity engineering experience
• Strong grasp of OWASP Top 10 and web app security principles
• Hands on WAF experience, ideally Azure WAF and/or AWS WAF
• API security experience (auth, encryption, monitoring)
• Secrets/key management platform experience (Azure Key Vault, AWS KMS or similar)
• SSDLC, CI/CD security and DevSecOps exposure

Nice to have: exposure to Azure OpenAI, Copilot or Claude, AI threat modelling, SAST/DAST/SCA tooling, or certs such as AZ-500, SC-100, CISSP.