Application Security Engineer

Application Security Engineer

• Purpose This is the first engineering hire into Rightmove's growing Application Security function,reporting to the Lead Application Security Engineer. You'll work closely with engineering teamsto deliver day-to-day AppSec capabilities across security tooling, vulnerability management,secure design and threat modelling, while helping shape how Application Security operates asthe function matures.

Key Responsibilities

• Vulnerability Management & Security Tooling
• Support the rollout and operation of application security tooling across engineeringrepositories, including SAST, SCA and secrets detection.
• Triage and classify security findings across repos, driving remediation of the secrets backlog
• Manage the day-to-day operation of vulnerability management, including findings triage,monitoring and engineering engagement.
• Maintain engineer-facing guidance for resolving vulnerabilities and requesting exceptions

Cloud Security

Engineering Team Engagement

Security Reviews & Triage

Threat Modelling

Process & Documentation

Requirements

• Must have:
• Practical experience in application security, security engineering or a related hands-onsecurity role
• Able to assess security findings in context, distinguish meaningful risk from tooling noise, andmake pragmatic recommendations to engineering teams.
• Working proficiency in Python (able to read, modify, and write scripts used for internal tooling)
• Practical experience with DAST/SAST/SCA/secrets scanning tools (Aikido, Snyk, Semgrep,Checkmarx, or similar)
• Experience with Prisma Cloud or a comparable cloud-native security platform
• Comfortable reading code and understanding CI/CD pipelines (GitLab CI or equivalent)
• Experience running or contributing to threat modelling exercises
• Comfortable running recurring stakeholder syncs with engineering teams
• Strong written communication
• Able to triage and prioritise a high volume of inbound requests independently

Nice to have

• Exposure to GCP security controls
• Familiarity with supply-chain security (npm/PyPI dependency risks)
• Prior experience in a scaling/greenfield security function

Success in first 6 months

Life at Rightmove

What we offer

• Cash plan for dental, optical and physio treatments.
• Private Medical Insurance, Pension and Life Insurance, Employee Assistance Plan.
• 27 days holiday plus two (paid) volunteering days a year to give back, and holiday buy schemes.
• Contributory stakeholder pension.
• Life assurance at 4x your basic salary to a spouse, family member or other nominated person in your life.
• Competitive compensation package.
• Paid leave for maternity, paternity, adoption & fertility.
• Travel Loans, Bike to Work scheme, Rental Deposit Loan.
• Charitable contributions through Payroll Giving and donation matching.
• Access deals and discounts on things like travel, electronics, fashion, gym memberships, cinema discounts and more.
• We offer hybrid working with a minimum of 2 days in the office. For our roles, such as Field or Home-based positions, different working arrangements apply - full details will be shared during the recruitment process.