Application Security Engineer


London
Negotiable
PR/575885_1769182649
Application Security Engineer
Our client is seeking a hands‑on Application Security Engineer to secure and harden next‑generation generative AI applications and platforms. This individual will be joining the Platform & Engineering team under the CTO. This a rare opportunity to join a small, elite engineering group shaping the future of AI across the organization, working at the intersection of cutting‑edge AI, platforms, and application security.
This team builds generative AI products used by employees, developers, and clients alike - from productivity tools (report writing, email, knowledge discovery) to client‑facing AI platforms. As these products move closer to consumer and retail banking use cases, security is critical. This role exists to actively break, exploit, and then secure real AI systems in production, not to define policy or theory.
Key Responsibilities
  • Hack and assess generative AI applications and developer platforms to identify, exploit, and remediate real‑world vulnerabilities
  • Engineer security solutions directly into production AI systems from day one
  • Secure emerging AI application attack surfaces, including prompt injection, access control, and API abuse
  • Design and build security tooling and frameworks that scale across AI platforms
  • Embed security best practices into fast‑moving development workflows without slowing delivery
  • Partner closely with engineers and product teams through hands‑on collaboration and pair programming
Requirements
  • Strong Golang engineering background with hands‑on application security experience
  • Proven track record securing production, business‑critical systems
  • Experience with ethical hacking, penetration testing, and thinking like an attacker
  • Ability to move from vulnerability discovery to practical, shippable fixes
  • Experience building or securing APIs, platforms, or developer tools
  • Interest in AI security (LLM or generative AI experience helpful, but not required)
  • Background in modern tech or high‑scale environments strongly preferred

FAQs

Congratulations, we understand that taking the time to apply is a big step. When you apply, your details go directly to the consultant who is sourcing talent. Due to demand, we may not get back to all applicants that have applied. However, we always keep your CV and details on file so when we see similar roles or see skillsets that drive growth in organisations, we will always reach out to discuss opportunities.

Yes. Even if this role isn’t a perfect match, applying allows us to understand your expertise and ambitions, ensuring you're on our radar for the right opportunity when it arises.

We also work in several ways, firstly we advertise our roles available on our site, however, often due to confidentiality we may not post all. We also work with clients who are more focused on skills and understanding what is required to future-proof their business. 

That's why we recommend registering your CV so you can be considered for roles that have yet to be created. 

Yes, we help with CV and interview preparation. From customised support on how to optimise your CV to interview preparation and compensation negotiations, we advocate for you throughout your next career move.