Senior Application Security Engineer

Overview

This role is designed to integrate security expertise directly within our engineering teams developing AI and cloud-native products. As a Senior Application Security Engineer, you'll guide security practices throughout the software development lifecycle (SDLC), ensuring security keeps pace with rapid delivery without becoming a bottleneck.

About Redgate

Redgate fosters a collaborative and accountable environment where people strive to deliver their best work. Our products empower data professionals to manage data and databases securely, a mission that grows in importance as systems scale, data regulations tighten, and AI adoption accelerates.

Redgate's AI Vision

By 2028, we aim to operate as a domain expert-plus-AI agent organization, leveraging AI to accelerate customer value delivery. Every team member works with advanced AI tools from the outset to augment their expertise.

Role Purpose

Embedded within the Product Security team, you will support multiple product and engineering groups by setting and enforcing security expectations across the whole SDLC. You'll have independent authority to make critical security decisions based on threat modeling, triage, and governance rather than relying solely on automated tools.

Key Duties

• Collaborate closely with engineering and product teams to embed security requirements throughout software design, development, testing, and release stages.
• Take ownership or co-ownership of application security governance, including defining secure-by-default standards, patterns, guardrails, and managing risk exceptions.
• Lead threat modeling efforts for new features and architectural changes, translating findings into actionable engineering tasks.
• Enhance SAST and DAST tool effectiveness by tuning configurations, calibrating severity, and providing developer guidance for triage.
• Assist product teams in securely adopting AI technologies, including large language models (LLMs), small language models (SLMs), and model components (MCP), exposing you to security challenges uncommon in the field.

Required Qualifications and Skills

• Demonstrated hands-on experience in product or application security within modern SDLC environments.
• Proficient in code review and articulating security concerns to developers, with primary experience in a C# environment plus familiarity with Java or Python.
• In-depth understanding of the OWASP Top 10 security risks and practical mitigation techniques.
• Experience with establishing or enhancing SAST and DAST processes, including tuning tools, managing triage workflows, and minimizing false positives.
• Practical knowledge of cloud and container security, preferably with AWS and Docker.

Compensation and Benefits

• Competitive salary between £60,000 and £75,000 dependent on experience.
• Monthly wellbeing allowance and substantial paid time off.
• Commitment to professional growth through training and career advancement opportunities.
• Private health insurance coverage.

Hiring Process and Culture

• All applications are reviewed personally by Talent Partners without AI screening.
• Applicants receive timely responses regarding the status of their application.
• The interview process is transparent and consistent, with clear information provided upfront about next steps.

Inclusion and Belonging

Redgate promotes an inclusive workplace founded on respect, fairness, and trust. We value diverse viewpoints and make hiring decisions solely on skills, potential, and cultural alignment.