Application Security Vulnerability Analyst

Salary: £117,000 - 130,000 per year

Requirements

• Strong background in Application Security, Vulnerability Management or Secure Software Development.
• Hands-on experience working with DAST and SCA security tools.
• Understanding of common application security vulnerabilities, including OWASP Top 10 risks.
• Experience validating security findings and identifying false positives.
• Knowledge of software development lifecycles and modern application architectures.
• Ability to assess vulnerability severity, exploitability and business risk.
• Strong analytical and stakeholder management skills.
• Experience within large-scale enterprise environments.
• Knowledge of secure coding practices across modern programming languages.
• Familiarity with vulnerability management platforms and security governance processes.
• Relevant security certifications such as CISSP, CSSLP, GWAPT, OSCP or similar.
• 1 year of experience in Application Security and Vulnerability Management.
• 1 year of experience working with DAST and/or SCA security tools.
• Preferred experience assessing or remediating OWASP Top 10 vulnerabilities.
• CISSP preferred.
• United Kingdom work authorisation required.

Responsibilities

• Assess vulnerabilities identified through DAST and SCA tooling.
• Develop and refine criteria for identifying and eliminating false positives.
• Perform risk assessments on reported vulnerabilities and provide remediation recommendations.
• Determine whether vulnerabilities exist within active or unused code paths.
• Identify duplicate findings that may be inflating vulnerability counts across applications and systems.
• Work closely with security, engineering and development teams to validate findings.
• Support vulnerability prioritisation based on risk, business impact and available remediation resources.
• Produce clear documentation and reporting to support remediation decision-making.

Technologies

• Support
• OWASP
• Security

More

We are supporting a large enterprise organisation on a remote, outside IR35 contract for an initial 6 months. We are hiring an experienced Application Security Vulnerability Analyst to help drive a critical remediation programme focused on improving application security posture. This role is centred on reviewing and validating vulnerabilities identified through DAST and SCA tools, separating genuine security risks from false positives, and helping engineering teams focus on the most impactful remediation work. The pay rate is £450 to £500 per day.

last updated 26 week of 2026