Senior Application Security Engineer, Redgate Software
ÂŁ60-75k
2 days a week in office
Database DevOps and management solutions for developers
Posted today
Database DevOps and management solutions for developers
501-1000 employees
Posted today
ÂŁ60-75k
2 days a week in office
501-1000 employees
Company mission
To solve the complex challenges of database management and ensure security across the DevOps lifecycle.
Role
Who you are
- Hands-on product or application security experience, embedding security practices across a modern software development lifecycle
- Ability to review code and communicate security issues clearly to developers, primarily within a C# ecosystem, with exposure to Java or Python
- Strong knowledge of the OWASP Top 10 and practical mitigation patterns
- Experience implementing or improving SAST/DAST processes: tool tuning, triage workflows, and reducing signal to noise
- Working understanding of cloud and container security fundamentals, ideally with AWS and Docker
What the job involves
- Redgate's product teams move fast, across a growing set of AI and cloud-native technologies, and security can't just be a gate at the end of that process
- This role exists to embed security expertise directly into how our engineering teams build and ship software: setting the standards, running the threat modelling, and making the judgement calls that keep pace with delivery instead of slowing it down
- Redgate brings together people who want to do their best work in an environment built on trust, accountability, and collaboration
- We build solutions that help data professionals securely manage the data and databases their organisations depend on, a space that's only becoming more critical as systems scale, data regulations increase, and AI adoption accelerates
- This role sits within our Product Security function, embedded across multiple product and engineering teams rather than a single one
- You'll define and operationalise security requirements throughout the SDLC, from initial design through to release, with real authority to make independent security calls rather than deferring to what a scanner tells you
- It's a role built on trust: teams will come to you for guidance, and the judgement you bring to triage, threat modelling, and governance decisions will shape how security actually gets done here
- Partner directly with engineering and product teams to define and operationalise security requirements across the full SDLC
- Own or co-own application security governance: secure-by-default standards, patterns, guardrails, and risk exceptions
- Lead threat modelling for new features and architectural changes, turning findings into practical engineering work
- Drive SAST/DAST adoption and quality, from tool tuning to severity calibration and developer-facing triage guidance
- Support product teams adopting AI, including LLMs, SLMs, and MCP, giving you visibility into work most security roles wouldn't touch
Application process
- Your application will be reviewed by a person. We don't use AI or automated tools to assess applications, and every profile is read by one of our Talent Partners
- You'll hear back within a few days. Whether it's a next step or a no, we aim to respond promptly so you're not left wondering
- Our interview process is straightforward and consistent. You'll find more detail on our typical hiring process below, so you know what's coming and why
Our take
As businesses become increasingly dependent on data, managing databases has become more complex. Companies need to move quickly while keeping systems secure and reliable. However, many still depend on manual processes and disconnected teams, making it harder to manage modern data infrastructure, especially as AI and cloud technologies continue to grow.
Redgate is helping companies tackle these challenges through database DevOps and lifecycle management tools. Its platform helps teams automate database changes, improve collaboration, and manage systems more efficiently and securely. Redgate, then, supports organisations throughout the full database development and deployment process.
More than 200,000 data professionals worldwide use Redgate's solutions too, signifying just how strong a position it has in the market. And with recent backing from Bregal Sagemount, the company plans to accelerate product innovation and expand even further so it can keep up with the ever-growing demand for secure, scalable data management.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
Company
Company values
- We're reasonable: We treat everyone as we would want to be treated ourselves, even when the circumstances are difficult.
- We're ingeniously simple: Our best products and services are ingeniously simple. The same goes for how we work internally. We work best when we don't overcomplicate things.
- Transparency helps us continually improve: We make mistakes visible and share the evidence used to make decisions. No gossiping, no intrigue, no pussy-footing around problems.
- We do our best work in teams: We continually improve when we make the most of everyone's expertise. The company is more important than the team and the team is more important than the individual.
- When our customers succeed, so do we: At Redgate, your growth matters. You’ll have the freedom to develop the skills you want, in the way that works best for you—supported by guidance, resources, and encouragement every step of the way. Above are just a few of the ways we help people learn, grow, and thrive here.
- Don't be an asshole: No matter how smart you are, or how good you are at narrowly-defined tasks, there is no room for you here if you're an asshole.
Company HQ
Cambridge, UK
Leadership
Jakub Lamik
(CEO)Jakub joined Redgate in 2019 as CPO, moving into the role of CEO in 2021. Previously, they spent nearly 9 years at Arm in various roles, including VP of Product.
Kate Duggan
(CMO)Kate joined Redgate in 2015 as a Product Marketing Manager, since then, they have held a number of roles and became the CMO in 2021. Previously, they spent over 3 years at enLight as a Business Development Director.
Cassi Roper
(CRO)Cassie joined Redgate in 2006 working in Renewal Sales, since then, they have held a number of roles and became the CRO in 2023.
Steven Mitchell
(CFO)Prior to joining Redgate in 2022, Steven was the CFO at Six Degrees Group and Dreamland Margate. They also spent 4 years at eir Ireland as a Corporate Finance Director, Interim Group CFO and Chief Strategy Officer.
David Gummer
(CPO)Prior to joining Redgate in 2022, David was the Global Head of Service Strategy & Portfolio Management at Finastra, a Director of Product Management at NGA Human Resources and a Director of Product Management & Alliances at Lumesse. They also spent 8 years at BT as the Head of Corporate Development, GM - Online (BT Directories) and Telemetry/M2M (BT Redcare).
Graham McMillan
(CTO)Prior to joining Redgate in 2024, Graham spent 9 years at Elsevier as an Integration & Data Architect, Director of Software Engineering, and VP of Engineering. Prior to that, they spent 7 years at Oracle as an Enterprise Architect Senior Director.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 11 more jobs at Redgate Software