Simply Business Logo

Simply Business

Application Security Engineer

Posted An Hour Ago
Be an Early Applicant
Hybrid
London, England, GBR
Senior level
Hybrid
London, England, GBR
Senior level
The Application Security Engineer embeds security throughout the software development lifecycle by advising on secure coding, threat modeling, OWASP Top 10 mitigation, code reviews, penetration testing, and SAST, DAST, and IAST tooling. The role partners with engineering teams, improves DevSecOps practices, researches AI and LLM threats, supports incident investigations, delivers security training, and mentors developers.
The summary above was generated by AI
Who Are We?

We insure small businesses and enable big dreams – not just for our customers, but for our people and communities too. With over 1,000,000 active insurance policies, we protect builders, bakers, landlords and more than 1,200 other trades.

We’re a technology company as well as one that sells insurance. That means we build, we fail, we learn and we improve. Through our global social impact strategy, called 'The Big Dreams Project’, we're working to help 10,000 small businesses start or grow by 2030.

Why not check out our advert on YouTube: Simply Business TV advert 2024: 'Simply the Best'.

Job CategoryTechnologyPosition TypePermanentTarget Openings1What Is the Opportunity?Here’s what you’ll be doing:
We’re on a mission to build a tech-forward, secure environment that empowers developers rather than putting roadblocks in their way. As an Application Security Engineer, you’ll act as a core technical guide across our software development lifecycle—helping us embed security directly into our code and architecture while exploring next-generation defensive strategies like AI/LLM threat modeling.
Unlike security roles where you’re isolated or acting as a gatekeeper, here you’ll be a genuine security champion. You’ll partner closely with engineering teams to demystify complex threats, modernise our DevSecOps practices, and mentor developers to build naturally resilient systems.

As one of our Application Security Engineers, you’ll:

  • Provide expert guidance on secure coding, threat modelling, and OWASP Top 10 mitigation.

  • Promote a security-first mindset across development teams, acting as a supportive technical mentor.

  • Integrate security assessments, code reviews, and penetration testing seamlessly into the SDLC.

  • Evaluate, implement, and run modern security tooling (SAST, DAST, IAST) to streamline vulnerability checks.

  • Research emerging AI and LLM threat classes to design proactive, cutting-edge defensive architectures.

  • Participate in incident response investigations and help deliver engaging security training.

We’re looking for someone who is:

  • Experienced in application security (5+ years) with strong hands-on penetration testing and security tooling skills.

  • Deeply knowledgeable about web vulnerabilities, secure coding practices, and cloud environments (AWS, Azure, or GCP).

  • Familiar with DevSecOps methodologies and automated security integration.

  • An open, clear communicator who can explain complex security concepts in plain English to both technical and non-technical teammates.

  • Highly collaborative, empathetic, and passionate about mentoring engineers rather than just checking compliance boxes.

  • Curious, proactive, and keen to stay ahead of modern threat landscapes like AI security.

(We know it’s tough, but please try to avoid the confidence gap. You don’t have to match all the bullet points above to be considered for this role.)

We encourage people of all different backgrounds and identities to apply. We are committed to maintaining an inclusive, supportive place for you to be you and do your very best work.

If you love dissecting complex systems, automating security right into the pipeline, and tackling emerging challenges like AI/LLM threats without the usual red tape, we’d love to hear from you. Join us to build, break, and protect the tech behind our platform—apply today to help shape the future of our engineering security!

What are the benefits of working at Simply Business:
  • we offer a great work-life balance where workloads are manageable and everyone has the flexibility to work hybrid

  • on top of the 25 days annual leave (plus bank holidays), we offer the option to buy five more days of holiday with your flexible benefits

  • our flexible parental leave allows you to approach an important time how you want - with six months full pay to the primary caregiver and four weeks full pay if you're the secondary caregiver

  • our life event leave is an extra days leave every two years for those big moments in your life like moving house or your birthday. And our long-serving employees get a two week paid sabbatical after five years of service, then four weeks off after ten years of service

  • private medical insurance through BUPA, that covers any pre-existing condition is a core benefit. Plus a health cash plan that covers your everyday medical expenses

  • we offer a competitive salary based on your experience and the current market. Plus the potential to earn an annual bonus based on performance

  • access to tools to support your personal development on our dedicated learning platform. As well as support for your mental health with access to counselling

  • we match what you put into your pension up to five per cent. And pass on a tax-free sum that's four times your basic salary with our life assurance policy, with the option to increase it to ten times through our flexible benefit scheme

  • our salary sacrifice car scheme gives you the option to buy a brand new, fully insured, and maintained car for a convenient fixed monthly amount taken from your gross salary (after 6 months service)

  • our flexible benefits scheme gives you an allocated amount to use each year on benefits like critical illness cover, dental insurance, travel insurance, or a gym membership

Ready to join us and drive our success as a high-performing team? Apply today.

Employment Practices

Simply Business is committed to providing equality and opportunities for all employees and candidates considering a career with us. We offer a workplace where colleagues are treated with respect and dignity. We don’t (and won’t) discriminate either directly or indirectly on the grounds of race, colour, religion, belief, political opinion, disability, nationality, ethnic origin, sex, sexual orientation or relationship status at any stage of the hiring process or during the course of your employment.

HQ

Simply Business London, England Office

Close to Moorgate and Bank underground stations. In the heart of London's finance business district, with so many amazing lunch options we even created a spreadsheet with the best rated lunches scored by SBers.

Similar Jobs at Simply Business

5 Days Ago
Hybrid
London, England, GBR
Senior level
Senior level
Fintech • Information Technology • Insurance • Software
Lead Accounts Payable operations, manage month-end posting and reconciliations, enforce finance controls (SoX/Audit), mentor team members, modernise workflows using SAP ByDesign and SAP Concur, support audits and EUC/regression testing, and ensure timely supplier payments and policy compliance.
Top Skills: ExcelSap BydesignSap Concur
7 Days Ago
Hybrid
London, England, GBR
Mid level
Mid level
Fintech • Information Technology • Insurance • Software
Own and commercially manage a portfolio of specialist SME insurance products. Drive trading performance, expand insurer and MGA panels, partner with call centre and operational teams, ensure product governance and fair value assessments, and resolve operational incidents to improve customer journeys for complex trade segments.
7 Days Ago
Hybrid
London, England, GBR
Senior level
Senior level
Fintech • Information Technology • Insurance • Software
The Senior Data Scientist will unify technical vision, develop and deploy ML models, and enhance AI strategy across teams. Responsibilities include collaboration, ownership of projects, and maximizing value through AI and data science techniques.
Top Skills: AWSDatabricksDbxGCPMlflowPython

What you need to know about the London Tech Scene

London isn't just a hub for established businesses; it's also a nursery for innovation. Boasting one of the most recognized fintech ecosystems in Europe, attracting billions in investments each year, London's success has made it a go-to destination for startups looking to make their mark. Top U.K. companies like Hoptin, Moneybox and Marshmallow have already made the city their base — yet fintech is just the beginning. From healthtech to renewable energy to cybersecurity and beyond, the city's startups are breaking new ground across a range of industries.

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account