Application Security Engineer

About the role

This role is the first engineering hire into Rightmove's growing Application Security function. You will work closely with engineering teams to deliver day-to-day AppSec capabilities across security tooling, vulnerability management, secure design, and threat modelling while helping shape the function as it matures.

Responsibilities

• Support the rollout and operation of application security tooling across engineering repositories, including SAST, SCA and secrets detection.
• Triage and classify security findings across repos, driving remediation of the secrets backlog.
• Manage the day-to-day operation of vulnerability management, including findings triage, monitoring and engineering engagement.
• Support cloud security posture management through Prisma Cloud, including findings triage, monitoring and engagement with relevant engineering/platform teams.
• Conduct secure design and API security reviews for new services, integrations, and RFCs.
• Facilitate threat modelling sessions using the team's runbook/guide.
• Maintain runbooks and process documentation as the function matures.

Required skills

• Application security
• Security engineering
• Python
• DAST
• SAST
• SCA
• Secrets scanning
• Prisma Cloud
• CI/CD pipelines
• Threat modelling

Nice to have

• GCP security controls
• Supply-chain security
• Greenfield security

Qualifications

• Practical experience in application security, security engineering or a related hands-on security role

Benefits

• Cash plan for dental, optical and physio treatments
• Private Medical Insurance
• Pension
• Life Insurance
• Employee Assistance Plan
• 27 days holiday
• Volunteering days
• Holiday buy schemes
• Travel Loans
• Bike to Work scheme

About the Company

Rightmove is the UK's largest choice of properties and a go-to destination for millions of people planning their next move. They are a friendly, supportive place to work that values curiosity, collaboration, and delivering measurable impact.