Back to all jobs
- Seniority
- Senior
About the role
<div class="content-intro"><h2 data-pm-slice="1 1 []">WHO ARE WE</h2>
<p>Cognism is the leading provider of European B2B data and sales intelligence. Ambitious businesses of every size use our platform to discover, connect, and engage with qualified decision-makers faster and close more deals. Headquartered in London with global offices, Cognism’s contact data and contextual signals are trusted by thousands of revenue teams to eliminate the guesswork from prospecting.</p></div><p><strong><span data-contrast="none">THE ROLE</span></strong><span data-ccp-props="{"134233117":true,"134233118":true,"201341983":2,"335559740":300}"> </span></p>
<p><span data-contrast="none">The Senior<strong> Application Security Engineer</strong></span><span data-contrast="none"> is a key member of Cognism’s Information Security Team, reporting into the Application & Infrastructure Security Manager. Your mission is to </span><strong><span data-contrast="none">embed security by design</span></strong><span data-contrast="none"> across our engineering and product organization by integrating modern application security practices throughout the full development lifecycle.</span><span data-contrast="none"> </span><span data-contrast="none">We focus on building secure, scalable, and resilient systems while enabling the business to innovate quickly and safely. It is to drive a culture where the fastest path for our engineers is the securest path.</span><span data-ccp-props="{"134233117":true,"134233118":true,"201341983":2,"335559740":300}"> </span></p>
<p><span data-contrast="none">You will work closely with Product, Engineering, Architecture, and Data teams to understand risks within our platform, including risks introduced by AI powered features, and ensure the right controls, guardrails, and security patterns are built into the product at its inception – all the while ensuring a balanced approach to the product experience that our thousands of large global enterprise customers use every day.</span><span data-ccp-props="{"134233117":true,"134233118":true,"201341983":2,"335559740":300}"> </span></p>
<p><span data-contrast="none">This role is ideal for a senior IC who is </span><strong><span data-contrast="none">technical, collaborative, and pragmatic</span></strong><span data-contrast="none">, with the ability to influence engineering teams while driving hands on improvements to Cognism’s secure SDLC.</span><span data-ccp-props="{"134233117":true,"134233118":true,"201341983":2,"335559740":300}"> </span></p>
<p><strong><span data-contrast="none">KEY RESPONSIBILITIES</span></strong><span data-ccp-props="{"134233117":true,"134233118":true,"201341983":2,"335559740":300}"> </span></p>
<p><strong><span data-contrast="none">Security by Design & Product Integration</span></strong><span data-ccp-props="{"134233117":true,"134233118":true,"201341983":2,"335559740":300}"> </span></p>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="23" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Partner with Product, Web and Data Engineering teams from the ideation stage to ensure security requirements are considered early in feature and model design.</span></li>
<li data-leveltext="" data-font="Symbol" data-listid="23" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1">Translate product and application risks into actionable security controls, making recommendations repeatable to build guardrails and guidance that product, design, and engineering teams can apply as they scale and build the products in the teams they own.</li>
<li data-leveltext="" data-font="Symbol" data-listid="23" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1">Help shape security acceptance criteria and guide engineering teams during design reviews and backlog planning.<span data-ccp-props="{"134233117":true,"134233118":true,"201341983":2,"335559740":300}"> </span></li>
</ul>
<p><strong><span data-contrast="none">Application Risk Assessment & AI Security</span></strong><span data-ccp-props="{"134233117":true,"134233118":true,"201341983":2,"335559740":300}"> </span></p>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="24" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Identify and assess application risks across Cognism’s SaaS platform, data processing pipelines, including emerging risks associated with AI/ML capabilities.</span></li>
<li data-leveltext="" data-font="Symbol" data-listid="24" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1">Contribute to AI feature reviews and participate in AI risk assessments to ensure responsible and secure use of models, in a way that balances the need to innovate and challenge the status quo in AI implementation.</li>
<li data-leveltext="" data-font="Symbol" data-listid="24" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1">Assess and pragmatically recommend mitigations for security risks in data pipelines, model-training workflows, feature stores, and ML systems, ensuring strong controls for data access, data lineage, model integrity, and protection of sensitive datasets.<span data-ccp-props="{"201341983":2,"335559739":200,"335559740":300}"> </span></li>
</ul>
<p><strong><span data-contrast="none">Secure SDLC & DevSecOps Enablement</span></strong><span data-ccp-props="{"134233117":true,"134233118":true,"201341983":2,"335559740":300}"> </span></p>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="25" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Partner with our engineering and platform team to embed security guardrails into our software development lifecycle and agile engineering workflows.</span></li>
<li data-leveltext="" data-font="Symbol" data-listid="25" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1">Partner with engineering teams to integrate and optimize security tooling into CI/CD pipelines (SAST, SCA, DAST, container scanning, IaC scanning).</li>
<li data-leveltext="" data-font="Symbol" data-listid="25" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1">Drive automation and developer-friendly security processes that minimize friction and support rapid delivery.<span data-ccp-props="{"134233117":true,"134233118":true,"201341983":2,"335559740":300}"> </span></li>
</ul>
<p><strong><span data-contrast="none">Threat Modelling & Architecture Support</span></strong><span data-ccp-props="{"134233117":true,"134233118":true,"201341983":2,"335559740":300}"> </span></p>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="26" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Conduct and facilitate a self-serve, risk-driven approach to pragmatic threat modelling sessions for new features, services, and AI components.</span></li>
<li data-leveltext="" data-font="Symbol" data-listid="26" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1">Conduct threat modelling for data architectures, including ingestion, transformation, storage, streaming, and ML model deployment patterns, ensuring data confidentiality, integrity, and responsible use.</li>
<li data-leveltext="" data-font="Symbol" data-listid="26" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1">Provide hands-on application security guidance to engineering teams, helping them implement secure APIs, microservices, data flows, and integrations.</li>
<li data-leveltext="" data-font="Symbol" data-listid="26" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1">Maintain and expand Cognism’s secure coding standards, guidance, and reusable security patterns.<span data-ccp-props="{"134233117":true,"134233118":true,"201341983":2,"335559740":300}"> </span></li>
</ul>
<p><strong><span data-contrast="none">Application Security Testing & Engineering</span></strong><span data-ccp-props="{"134233117":true,"134233118":true,"201341983":2,"335559740":300}"> </span></p>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="27" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Perform hands-on security testing (manual and automated) for web applications, microservices, APIs, and cloud components.</span></li>
<li data-leveltext="" data-font="Symbol" data-listid="27" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1">Plan, coordinate, and oversee penetration tests, red team exercises, and third-party security assessments, ensuring findings are addressed and tracked.</li>
<li data-leveltext="" data-font="Symbol" data-listid="27" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1">Validate findings, assist with prioritization, and partner with engineering teams on remediation strategies.<span data-ccp-props="{"134233117":true,"134233118":true,"201341983":2,"335559740":300}"> </span></li>
</ul>
<p><strong><span data-contrast="none">Collaboration, Education & Influence</span></strong><span data-ccp-props="{"134233117":true,"134233118":true,"201341983":2,"335559740":300}"> </span></p>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="28" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Work directly with product squads, acting as a trusted advisor and embedded security partner. Take the time to understand what other teams are working on, what business priorities are, and partner with teams to recommend risk mitigations that balance risk with opportunity and that take into account the threat landscape. </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="28" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1">Deliver security training, workshops, and guidance to improve engineering teams’ security maturity.Communicate security risk and tradeoffs clearly and constructively to technical and nontechnical stakeholders.<span data-ccp-props="{"134233117":true,"134233118":true,"201341983":2,"335559740":300}"> </span></li>
</ul>
<p><strong><span data-contrast="none">CORE COMPETENCIES</span></strong><span data-ccp-props="{"134233117":true,"134233118":true,"201341983":2,"335559740":300}"> </span></p>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="29" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Strong technical depth in application security, cloud security, and secure development.</span></li>
<li data-leveltext="" data-font="Symbol" data-listid="29" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1">Understanding of modern data stack components (e.g., data pipelines, feature stores) and the ability to collaborate effectively with data practitioners.</li>
<li data-leveltext="" data-font="Symbol" data-listid="29" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1">Deep understanding of communication protocols used for web development is a must-have.</li>
<li data-leveltext="" data-font="Symbol" data-listid="29" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1">Hands on experience with web application development, specifically for back-end development is a must-have competency. </li>
<li data-leveltext="" data-font="Symbol" data-listid="29" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1"><strong><span data-contrast="none">Risk-Based Prioritization</span></strong><span data-contrast="none">: Ability to distinguish between theoretical security risks and actual business threats, demonstrating a "risk-driven" rather than "compliance-driven" mindset.</span><span data-contrast="none"> Comfortable balancing security risk with product and commercial realities.</span></li>
<li data-leveltext="" data-font="Symbol" data-listid="29" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1"><strong><span data-contrast="none">Contextual Communication</span></strong><span data-contrast="none">: Capacity to translate complex technical vulnerabilities into business-impact stories that resonate with non-technical stakeholders and product owners.</span><span data-contrast="none"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="29" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1"><strong><span data-contrast="none">Collaborative Conflict Resolution</span></strong><span data-contrast="none">: Proven track record of approaching engineering friction with transparency and pragmatism, balancing a firm stance on security with a deep care for the developer experience.</span><span data-contrast="none"> Pragmatic problem solver with a growth mindset and bias toward action.</span></li>
<li data-leveltext="" data-font="Symbol" data-listid="29" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1"><strong><span data-contrast="none">Architectural Empathy: </span></strong><span data-contrast="none">Ability to put yourself in the position of your users (the engineers) to build security guardrails that are repeatable and embedded into existing workflows rather than added as hurdles.</span><span data-ccp-props="{"134233117":true,"134233118":true,"201341983":2,"335559740":300}"> </span></li>
</ul>
<p><strong><span data-contrast="none">EDUCATION & EXPERIENCE</span></strong><span data-ccp-props="{"134233117":true,"134233118":true,"201341983":2,"335559740":300}"> </span></p>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">5–10+ years of experience in Application Security, Product Security, or Security Engineering roles.</span></li>
<li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1">Strong experience securing cloud<span data-contrast="none"> </span><span data-contrast="none">native SaaS platforms (AWS preferred) and Data pipelines</span><span data-contrast="none">.</span><span data-contrast="none"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1">Handson experience with secure coding, application testing, and CI/CD security automation.</li>
<li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1">Experience working closely with engineering and product teams in agile environments.</li>
<li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1">Familiarity with security frameworks such as OWASP ASVS, OWASP Top 10, NIST, ISO 27001/2.</li>
<li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1">Experience evaluating and securing AI/ML enabled features is a strong advantage.</li>
<li data-leveltext="" data-font="Symbol" data-listid="30" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1">Experience in SME or high-growth SaaS environments preferred<span data-contrast="none">.</span></li>
</ul><div class="content-conclusion"><h1> </h1>
<h2 data-pm-slice="1 1 []">WHY COGNISM</h2>
<p>At Cognism, we’re not just building a company - we’re building an inclusive community of brilliant, diverse people who <strong>support, challenge, and inspire each other every day</strong>. If you’re looking for a place where your work truly <strong>makes an impact</strong>, you’re in the right spot!</p>
<p>Our values aren’t just words on a page—they guide how we work, how we treat each other, and how we grow together. They shape our culture, drive our success, and ensure that everyone feels valued, heard, and empowered to do their best work.</p>
<p>Here’s what we stand for:</p>
<p>🤝 <strong>We Own the Outcome Together.</strong><br>🤓 <strong>We Deeply Understand our Customers. </strong><br>🏆 <strong>We Celebrate Impact Wherever It Comes From.</strong></p>
<p>At Cognism, we are committed to fostering an inclusive, diverse, and supportive workplace. We welcome applications from individuals typically underrepresented in tech, so if this role excites you but you’re unsure if you meet every requirement, we encourage you to apply!</p>
<p> </p></div>
731,000+ hidden jobs like this
cognism and thousands of companies post here first — often days before LinkedIn or Indeed. Your first 5 applications are free; go Pro to apply without limits.
Everything Pro unlocks:
- Unlimited applications — free stops at 5
- Track every application in one place
- Apply straight to the source, one click
- Save & organize roles you love
- Roles pulled from company boards before the big sites
