Application Security Engineer

<div class="content-intro"><p>&nbsp;</p> <p><span style="color: rgb(0, 4, 67);"><img style="max-width: 100%;" src="https://www.rightmove.co.uk/careers/content/uploads/2026/09/Untitled-30-July-2026-at-10.03.05-3-8.png" alt="" width="1001"><strong><br><br></strong></span></p> <p>Our vision is to give everyone the belief they can make their move. We aim to make moving simpler,&nbsp;by giving everyone the best place to turn to and return to for access to the tools, expertise, trust, and belief to make it happen.</p> <p>We’re home to the UK’s largest choice of properties and are the go-to destination for millions&nbsp;of people planning their next move, reading the latest industry news, or just browsing what’s on the market.&nbsp;</p> <hr> <p>&nbsp;</p></div><p><strong>Application Security Engineer</strong></p> <p><strong>Purpose</strong><br>This is the first engineering hire into Rightmove's growing Application Security function,reporting to the Lead Application Security Engineer. You'll work closely with engineering teamsto deliver day-to-day AppSec capabilities across security tooling, vulnerability management,secure design and threat modelling, while helping shape how Application Security operates asthe function matures.</p> <p><strong>Key Responsibilities</strong></p> <ul> <li>Vulnerability Management &amp; Security Tooling</li> <li>Support the rollout and operation of application security tooling across engineeringrepositories, including SAST, SCA and secrets detection.</li> <li>Triage and classify security findings across repos, driving remediation of the secrets backlog</li> <li>Manage the day-to-day operation of vulnerability management, including findings triage,monitoring and engineering engagement.</li> <li>Maintain engineer-facing guidance for resolving vulnerabilities and requesting exceptions</li> </ul> <p><strong>Cloud Security</strong></p> <ul> <li>Support cloud security posture management through Prisma Cloud, including findings triage,monitoring and engagement with relevant engineering/platform teams.</li> </ul> <p><strong>Engineering Team Engagement</strong></p> <ul> <li>Run a risk-tiered engagement cadence with engineering teams based on SLA compliance</li> </ul> <p><strong>Security Reviews &amp; Triage</strong></p> <ul> <li>Triage inbound security requests per the AppSec triage SLA</li> <li>Conduct secure design and API security reviews for new services, integrations, and RFCs</li> <li>Review and respond to penetration test requests and third-party integration reviews</li> </ul> <p><strong>Threat Modelling</strong></p> <ul> <li>Facilitate threat modelling sessions using the team's runbook/guide</li> <li>Work with engineering teams to establish and improve threat modelling practices acrosssquads</li> </ul> <p><strong>Process &amp; Documentation</strong></p> <ul> <li>Maintain runbooks and process documentation as the function matures</li> <li>Support recurring review cadences (e.g. access reviews, vulnerability audits)</li> </ul> <p><strong>Requirements</strong><br><strong>Must have:</strong></p> <ul> <li>Practical experience in application security, security engineering or a related hands-onsecurity role</li> <li>Able to assess security findings in context, distinguish meaningful risk from tooling noise, andmake pragmatic recommendations to engineering teams.</li> <li>Working proficiency in Python (able to read, modify, and write scripts used for internal tooling)</li> <li>Practical experience with DAST/SAST/SCA/secrets scanning tools (Aikido, Snyk, Semgrep,Checkmarx, or similar)</li> <li>Experience with Prisma Cloud or a comparable cloud-native security platform</li> <li>Comfortable reading code and understanding CI/CD pipelines (GitLab CI or equivalent)</li> <li>Experience running or contributing to threat modelling exercises</li> <li>Comfortable running recurring stakeholder syncs with engineering teams</li> <li>Strong written communication</li> <li>Able to triage and prioritise a high volume of inbound requests independently</li> </ul> <p><strong>Nice to have:</strong></p> <ul> <li>Exposure to GCP security controls</li> <li>Familiarity with supply-chain security (npm/PyPI dependency risks)</li> <li>Prior experience in a scaling/greenfield security function</li> </ul> <p><strong>Success in first 6 months</strong></p> <ul> <li>Fully ramped on Aikido, independently supporting rollout, triage and day-to-day operations</li> <li>Cloud Security handover complete: backlog triaged, monitoring cadence running</li> <li>Risk-tiered engagement cadence live and running its first full cycle</li> <li>Independently triaging and closing security review requests within SLA</li> <li>Independently facilitating threat modelling sessions with engineering teams</li> <li>Identified and delivered improvements to at least one AppSec process or workflow</li> </ul><div class="content-conclusion"><hr> <h3><span style="color: rgb(0, 4, 67);"><strong>Life at Rightmove</strong></span></h3> <p>Despite our growth, we’ve remained a friendly, supportive place to work, with employee #1 still working here!&nbsp; We’ve done this by placing the Rightmove Hows at the heart of everything we do. These are the essential values that reflect our culture, and include:</p> <ul> <li><strong>We&nbsp;create&nbsp;value…</strong>by delivering results and building trust with partners and consumers.</li> <li><strong>We&nbsp;think&nbsp;bigger…</strong>by acting with curiosity and setting bold aspirations.</li> <li><strong>We&nbsp;care&nbsp;deeply…</strong>by being real, having fun, and valuing diversity.</li> <li><strong>We&nbsp;move&nbsp;together…</strong>by being one team - internally collaborative, externally competitive.</li> <li><strong>We&nbsp;make&nbsp;a difference…</strong>by focusing on delivering measurable impact.</li> </ul> <p style="padding-left: 40px;"><code><a href="https://www.rightmove.co.uk/careers/culture/" target="_blank"><img style="float: left; max-width: 100%;" src="https://www.rightmove.co.uk/careers/content/uploads/2026/09/Job-alerts-1.png" alt="" width="452"></a></code></p> <p style="padding-left: 40px;">&nbsp;</p> <p style="padding-left: 40px;">&nbsp;</p> <p>We believe in careers that open doors and help our team develop by providing an open and inclusive work environment, offering ongoing&nbsp; &nbsp;training opportunities, and supporting charity fundraising events. And with <strong>89% of Rightmovers saying we’re a great place to work</strong>, we’re clearly doing something right!<strong>&nbsp;<br><br><img src="https://www.rightmove.co.uk/careers/content/uploads/2026/07/Untitled-30-July-2026-at-10.03.05-1-2.png" alt="" width="1000" style="max-width: 100%;"><br></strong></p> <h3><span style="color: rgb(0, 4, 67);"><strong><img style="max-width: 100%;">What we offer</strong></span></h3> <ul> <li>Cash plan for dental, optical and physio treatments.</li> <li>Private Medical Insurance, Pension and Life Insurance, Employee Assistance Plan.</li> <li>27 days holiday plus two (paid) volunteering days a year to give back, and holiday buy schemes.</li> <li>Contributory stakeholder pension.</li> <li>Life assurance at 4x your basic salary to a spouse, family member or other nominated person in your life.</li> <li>Competitive compensation package.</li> <li>Paid leave for maternity, paternity, adoption &amp; fertility.</li> <li>Travel Loans, Bike to Work scheme, Rental Deposit Loan.</li> <li>Charitable contributions through Payroll Giving and donation matching.</li> <li>Access deals and discounts on things like travel, electronics, fashion, gym memberships, cinema discounts and more.</li> <li>We offer hybrid working with a minimum of 2 days in the office. For our roles, such as Field or Home-based positions, different working arrangements apply - full details will be shared during the recruitment process.</li> </ul> <p><strong><span style="color: rgb(0, 222, 180);"><img style="display: block; margin-left: auto; margin-right: auto; max-width: 100%;" src="https://www.rightmove.co.uk/careers/content/uploads/2026/09/Untitled-30-July-2026-at-10.03.05-8.png" alt="" width="1000"></span></strong></p> <hr> <h4><em>As an Equal Opportunity Employer, Rightmove will never discriminate based on age, disability, sex, race, religion or belief, gender reassignment, marriage / civil partnership, pregnancy/maternity or sexual orientation.&nbsp;<br></em><br><em>At Rightmove, we believe that a diverse and inclusive workforce leads to better innovation, productivity, and overall success. We are committed to creating a welcoming and inclusive environment for all employees, regardless of their background or identity, to develop and promote a diverse culture that reflects the communities we serve.</em></h4> <hr> <h4>By applying, you confirm that you are aged at least 18 or over and&nbsp;that you’ve read and understood our <a class="decorated-link" href="https://www.rightmove.co.uk/c/privacy-policy/" target="_blank" data-start="192" data-end="259"><strong data-start="193" data-end="211">Privacy Policy</strong></a>, which explains how we handle and protect your personal information during the recruitment process.</h4></div>