Lead Application Security Engineer

About the role

The Lead Application Security Engineer will join the Information Security team to embed security into application design, development, and deployment. This senior individual contributor role focuses on providing risk-based security advice across internally developed applications, enterprise platforms, cloud services, and AI-enabled workstreams.

Responsibilities

• Lead the development of application security capabilities, including standards, secure design patterns, and review processes.
• Act as a senior security advisor to ICT, AI Engineering, and business stakeholders.
• Review and assess application designs, architecture, APIs, and cloud services to identify security risks.
• Mature repeatable approaches for threat modelling and risk-based assurance.
• Provide guidance on secure development lifecycle practices, including dependency and secrets management.
• Conduct threat modelling for applications and AI-enabled workflows using methodologies like STRIDE.
• Support security reviews of CI/CD pipelines, infrastructure as code, and containerised workloads.

Required skills

• Application Security
• DevSecOps
• Cloud Security
• Security Architecture
• Risk Management
• Threat Modelling
• API Security
• Azure
• CI/CD pipelines
• Infrastructure as Code

Nice to have

• AI-related technologies
• Large language models
• ISO27001

Qualifications

• 7+ years' experience in cyber security, application security, DevSecOps, cloud security, or security architecture

Certifications

• CISSP
• CCSP
• SSCP
• CSSLP
• CISM
• CISA

Benefits

• Health and wellness support
• Professional development

About the Company

Brunswick is a global advisory firm that helps companies tackle high-stakes issues and navigate complex stakeholder relationships. Founded in 1987 in London, the firm has grown to 27 offices in 18 countries and operates as a one-firm firm with no individual profit centers.