Home / Jobs / Senior Application Security Engineer
Senior Application Security Engineer
LondonSource: WhatJobs
See advert for pay
Overview
As a Senior Security Engineer, you will own meaningful parts of Flagstone’s security stack and help harden our Azure environment. You’ll work within a tight Security Engineering team focused on cloud security, detection, and security operations, directly tying security to the Azure estate. Your work will drive observable security improvements, from detection tuning to incident response coordination. You will collaborate cross-functionally to scale our security capabilities in a fast-paced fintech context.
Pay / Benefits
Competitive bonus scheme
Flexible benefits budget
Salary sacrifice options
Around the World work-from-anywhere
Mental wellbeing support
Learning and development budget 1000
Responsibilities
Maintain and improve Microsoft Sentinel deployment with detection tuning and data connectors
Operate Defender XDR and Defender for Cloud including policy management and posture recommendations
Harden Azure across identity, networking, storage, WAF, and logging pipelines
Contribute to IaC for security tooling deployments and drift management (Terraform or Bicep)
Investigate suspicious activity surfaced by Sentinel and Defender; triage, escalate, or contain
Support incident response activities including containment, evidence gathering, and post-incident review
Participate in security risk assessments and threat modeling across systems
Coordinate penetration test engagements and work with engineering to prioritize remediation
Key requirements
Hands-on SIEM experience, preferably Microsoft Sentinel; equivalents considered
Practical Azure security experience across Defender for Cloud, Entra ID, Azure networking, and cloud security posture management
Experience writing IaC using Terraform or Bicep in a security context
Ability to contribute to threat modelling and communicate risk to engineering and product audiences
Experience supporting or coordinating penetration testing programs, including remediation cycles
Familiarity with AI security considerations and/or AI tooling to augment security workflows
Growth mindset and genuine curiosity to learn
growth mindset
curiosity
clear communication with engineering and product teams
We use essential cookies to make this site work. With your permission we would also like to use the optional cookies below. Nothing optional is set until you choose, and you can change your mind at any time from "Cookie settings" at the bottom of every page. Cookie policy.
Essential — keep the site working and secure, and remember the choice you make here. Always on.