Application Security Engineer

In this role you will strengthen the FT’s cloud-native app security by building developer-friendly guardrails and practical security guidance. You’ll partner with product and platform teams to embed secure delivery across CI/CD and engineering workflows, translating findings into actionable remediation. The position blends hands-on security work with collaboration to scale secure development practices. You’ll join a culture that values curiosity, cross-functional teamwork and continuous improvement, contributing to trustworthy journalism and global reach.

• generous annual leave
• medical cover
• inclusive parental leave packages
• subsidised gym memberships
• opportunities to give back to the community
• 50% hybrid working model

• Strengthen application security across the FT’s cloud-native technology estate
• Develop and maintain developer-friendly security guardrails across GitHub-based CI/CD pipelines, repositories and workflows
• Leverage SAST, software composition analysis, secret scanning, vulnerability management and secure coding guidance
• Triage vulnerabilities, support threat modeling, and improve security playbooks
• Collaborate with engineers to remediate issues pragmatically and embed security into normal delivery
• Advise on security tooling in development pipelines and contribute to automation where possible

• Practical experience in application security
• Experience explaining and remediating security issues with software engineers
• Familiarity with web application security risks and secure coding practices
• Experience with vulnerability triage, prioritization and remediation tracking
• Experience using or interpreting findings from SAST, SCA, secret scanning or similar tools
• Experience participating in or supporting threat-modelling activities
• Ability to write scripts or small tools in Python to automate tasks
• Strong communication and collaboration skills
• Familiarity with Agile or Scrum ways of working

• Strong communication
• Collaborative mindset
• Growth mindset
• SAST
• Software Composition Analysis
• Secret Scanning