Application Security Engineer

About the role

<div class="content-intro"><p>&nbsp;</p> <p><span style="color: rgb(0, 4, 67);"><img style="max-width: 100%;" src="https://www.rightmove.co.uk/careers/content/uploads/2026/09/Untitled-30-July-2026-at-10.03.05-3-8.png" alt="" width="1001"><strong><br><br></strong></span></p> <p>Our vision is to give everyone the belief they can make their move. We aim to make moving simpler,&nbsp;by giving everyone the best place to turn to and return to for access to the tools, expertise, trust, and belief to make it happen.</p> <p>We’re home to the UK’s largest choice of properties and are the go-to destination for millions&nbsp;of people planning their next move, reading the latest industry news, or just browsing what’s on the market.&nbsp;</p> <hr> <p>&nbsp;</p></div><p><strong>Application Security Engineer</strong></p> <p><strong>Purpose</strong><br>This is the first engineering hire into Rightmove's growing Application Security function,reporting to the Lead Application Security Engineer. You'll work closely with engineering teamsto deliver day-to-day AppSec capabilities across security tooling, vulnerability management,secure design and threat modelling, while helping shape how Application Security operates asthe function matures.</p> <p><strong>Key Responsibilities</strong></p> <ul> <li>Vulnerability Management &amp; Security Tooling</li> <li>Support the rollout and operation of application security tooling across engineeringrepositories, including SAST, SCA and secrets detection.</li> <li>Triage and classify security findings across repos, driving remediation of the secrets backlog</li> <li>Manage the day-to-day operation of vulnerability management, including findings triage,monitoring and engineering engagement.</li> <li>Maintain engineer-facing guidance for resolving vulnerabilities and requesting exceptions</li> </ul> <p><strong>Cloud Security</strong></p> <ul> <li>Support cloud security posture management through Prisma Cloud, including findings triage,monitoring and engagement with relevant engineering/platform teams.</li> </ul> <p><strong>Engineering Team Engagement</strong></p> <ul> <li>Run a risk-tiered engagement cadence with engineering teams based on SLA compliance</li> </ul> <p><strong>Security Reviews &amp; Triage</strong></p> <ul> <li>Triage inbound security requests per the AppSec triage SLA</li> <li>Conduct secure design and API security reviews for new services, integrations, and RFCs</li> <li>Review and respond to penetration test requests and third-party integration reviews</li> </ul> <p><strong>Threat Modelling</strong></p> <ul> <li>Facilitate threat modelling sessions using the team's runbook/guide</li> <li>Work with engineering teams to establish and improve threat modelling practices acrosssquads</li> </ul> <p><strong>Process &amp; Documentation</strong></p> <ul> <li>Maintain runbooks and process documentation as the function matures</li> <li>Support recurring review cadences (e.g. access reviews, vulnerability audits)</li> </ul> <p><strong>Requirements</strong><br><strong>Must have:</strong></p> <ul> <li>Practical experience in application security, security engineering or a related hands-onsecurity role</li> <li>Able to assess security findings in context, distinguish meaningful risk from tooling noise, andmake pragmatic recommendations to engineering teams.</li> <li>Working proficiency in Python (able to read, modify, and write scripts used for internal tooling)</li> <li>Practical experience with DAST/SAST/SCA/secrets scanning tools (Aikido, Snyk, Semgrep,Checkmarx, or similar)</li> <li>Experience with Prisma Cloud or a comparable cloud-native security platform</li> <li>Comfortable reading code and understanding CI/CD pipelines (GitLab CI or equivalent)</li> <li>Experience running or contributing to threat modelling exercises</li> <li>Comfortable running recurring stakeholder syncs with engineering teams</li> <li>Strong written communication</li> <li>Able to triage and prioritise a high volume of inbound requ

Skills