Lead Application Security Engineer (AWS)

Location: London, England

Company

hirify.global provides technology and investment solutions that give independent financial advisors access to alternative investment products and asset managers.

What you will do

• Own application security practices across the software development lifecycle.
• Design and implement automated CI/CD controls, including SAST, DAST, dependency, and container security scanning.
• Lead security architecture and design reviews across product and platform areas.
• Drive threat modeling as a repeatable practice across engineering teams.
• Triage, validate, prioritize, and coordinate remediation of vulnerabilities through resolution.
• Partner with engineers, product owners, and external security vendors while developing automation and AI-assisted security workflows.

Requirements

• Experience in application or product security teams.
• Ability to read and reason about production code, with working knowledge of Java/Kotlin and JavaScript/TypeScript with React.
• Strong AWS security experience in cloud-native, containerized environments such as EKS.
• Hands-on experience with SAST, DAST, dependency scanning, and container scanning across the SDLC.
• Experience leading threat modeling, security architecture reviews, and design reviews.
• Confident communication with technical and non-technical stakeholders, plus experience adopting AI tools and automated security workflows.

Nice to have

• Experience building an application security practice from an early stage.
• Builder's mindset and enthusiasm for experimenting with new security technologies.

Culture & Benefits

• Inclusive environment focused on authenticity, support, growth, and innovation.
• Recognized as a Best Place to Work.
• Equal opportunity employer committed to fair and unbiased assessment.
• AI tools support parts of the recruitment process, while hiring decisions remain human-led.