Security Design Engineer (AppSec)

Written By Sarah Wysockyj

£675 - £690 per day (Inside IR35)
Contract
Hybrid / Edinburgh
Ref - 1639763

  • Superb opportunity to join a leading financial services client with offices in Edinburgh.

    This is an initial 6-month contract inside IR35. There will be a requirement to be in the office up to 3-days per week.

    The Role

    We are seeking an experienced Security Design Engineer (AppSec) to lead end-to-end security solution design across complex technology environments. You will produce high-quality architecture and design artefacts aligned to business and security standards, influence strategic direction, and provide hands-on application security expertise across large-scale transformation programmes.

    What you’ll do

    • Own and deliver secure solution designs, architecture patterns, design decisions, and risk assessments

    • Partner with enterprise and solution architects to ensure alignment with strategic architecture

    • Provide technical leadership and act as an AppSec subject matter expert for delivery teams

    • Design and embed security into modern application stacks and CI/CD pipelines

    • Present designs and recommendations to design authorities and senior stakeholders

    • Identify control gaps, define remediation plans, and manage residual risk

    • Support governance, peer review, and architectural assurance processes

  • Deep application security experience across cloud-native, microservices, containerised and Kubernetes environments

    • Strong expertise in SAST, DAST, IAST, MAST, SCA, SBOMs, and supply-chain security

    • Proven experience integrating security testing into CI/CD (e.g. GitHub Actions, GitLab, Jenkins, Azure DevOps)

    • Threat modelling, secure SDLC design, and risk-based security policy development

    • Experience in vulnerability and exposure management and network security concepts (segmentation, logging, scanning)

    • Familiarity with industry frameworks (OWASP SAMM/ASVS, NIST SSDF, SLSA, CSA)

    • Ability to communicate complex security concepts to both technical and non-technical stakeholders

    • Experience working in large, complex IT transformation programmes

    • AppSec tools such as Checkmarx, Invicti, Snyk, Black Duck, Tenable (or similar)

    • Architecture modelling (e.g. BizzDesign, Archi, UML)

    • Jira and Confluence

    Qualifications (preferred)

    • Degree in cybersecurity, computer science, software engineering, or related field

    • CISSP, CISM, or equivalent cybersecurity certification

    • SABSA or TOGAF certification

    To arrange an immediate interview, please contact Ryan West today

APPLY NOW

We endeavour to process your personal data in a fair and transparent manner. In applying for this role, Talent Smart will be acting in your best interest and may contact you in relation to the role, either by email, phone or text message. For more information see our Privacy Policy on our website. It is important you are aware of your individual rights and the provisions the company has put in place to protect your data. If you would like further information on the policy or GDPR please contact us. Talent Smart are an Employment Business and an Employment Agency as defined within The Conduct of Employment Agencies & Employment Businesses Regulations 2003

 
Sarah Wysockyj
Next

Security Design Engineer (Software & App Design)