Security Engineer at Air Apps
United Kingdom
Posted
on-site · full_time · Visa sponsorship
Apply for this role at Air Apps
Responsibilities:
- Lead threat modeling for services and applications; translate findings into actionable remediation.
- Execute vulnerability scans and support/perform penetration tests; track closure of findings.
- Define secure coding guidelines and assist dev teams with secure design and code reviews.
- Integrate security checks into CI/CD pipelines and automate security validation.
- Triage security alerts, investigate incidents, perform RCA, and drive corrective actions.
- Implement and manage IAM, encryption and authentication controls.
- Review third-party integrations and APIs for security risks; provide mitigation recommendations.
- Maintain documentation, run tabletop exercises and support compliance activities.
Requirements:
- ~4+ years in security engineering, application security, or cybersecurity roles.
- Solid understanding of OWASP Top 10, secure coding practices and threat modeling.
- Experience with scanners and pen-test tooling (e.g., Nessus, Qualys, Burp Suite).
- Familiarity with SIEM/IDS and security monitoring/alerting workflows.
- Scripting experience (Python, Bash, PowerShell) for automation and tooling.
- Knowledge of cloud environments (AWS/Azure/GCP), IAM and encryption approaches.
- Experience embedding security into DevSecOps and supporting regulatory compliance.