Application Security Engineer

About the role

This is the first engineering hire into Rightmove's growing Application Security function, reporting to the Lead Application Security Engineer. You will work closely with engineering teams to deliver day-to-day AppSec capabilities across security tooling, vulnerability management, secure design, and threat modelling while helping shape the function as it matures.

Responsibilities

• Support the rollout and operation of application security tooling across engineering repositories.
• Triage and classify security findings across repositories and drive remediation.
• Manage day-to-day vulnerability management operations and maintain engineer-facing guidance.
• Support cloud security posture management through Prisma Cloud.
• Conduct secure design and API security reviews for new services and integrations.
• Facilitate threat modelling sessions and establish improved practices across squads.
• Maintain runbooks and process documentation.

Required skills

• Application security
• Security engineering
• Python
• DAST
• SAST
• SCA
• Secrets scanning
• Prisma Cloud
• CI/CD pipelines
• Threat modelling

Nice to have

• GCP security controls
• Supply-chain security
• npm
• PyPI

Qualifications

• Practical experience in application security, security engineering or a related hands-on security role

Benefits

• Dental, optical and physio cash plan
• Private Medical Insurance
• Pension
• Life Insurance
• Employee Assistance Plan
• 27 days holiday
• Volunteering days
• Holiday buy schemes
• Travel Loans
• Bike to Work scheme

About the Company

Rightmove is the UK's largest choice of properties and a go-to destination for millions of people planning their next move. They are a friendly, supportive place to work that values curiosity, collaboration, and measurable impact.