Skip to main content
Posted 25 July, 2026

Product Application Security Analyst

Robert Walters
Manchester, ENG, GB Full Time

Job Description

You'll act as a trusted security advisor to engineering communities across the entire product lifecycle. This is a non-hands-on, advisory and governance-focused role designed to embed "security-by-design" into modern monolithic and microservice application architectures. You'll lead threat modelling, conduct technical risk assessments, evaluate third-party SaaS vendors, and translate complex risk into pragmatic guidance for engineering squads and business stakeholders.

\n

Partnering with a major UK enterprise digital platform to bring in a Senior InfoSec Analyst into their Product Assurance team.

\n

This isn't a checkbox compliance job, nor is it an operational 2nd-line ticket handling role. You'll sit right alongside software delivery squads and product teams, acting as the technical security authority across monolithic and microservice application architectures.

What the day-to-day looks like\n
    \n
  • \n

    Security by Design: Threat modelling (STRIDE/OWASP) and setting security requirements early in the SDLC alongside dev squads

    • \n
  • \n

    Architectural Assurance: Advising engineering teams on cloud-native security controls, containerisation, and API gateway logic

    • \n
  • \n

    Risk & Advisory: Conducting technical risk assessments on internal products and third-party SaaS vendors, turning technical flaws into clear risk recommendations

    • \n
  • \n

    Framework Alignment: Ensuring applications comply with PCI-DSS, NIST, and OWASP standards without creating operational friction for developers

    • \n
What you'll bring\n
    \n
  • \n

    Experience: 6+ years in InfoSec, cybersecurity advisory, or application security

    • \n
  • \n

    Tech Depth: Solid grasp of cloud environments (AWS, Azure, or GCP), microservices, containers (Docker/Kubernetes), and CI/CD pipelines (GitHub, Jenkins)

    • \n
  • \n

    Stakeholder Influence: The ability to explain technical risk to product managers and challenge engineering decisions constructively

    • \n
  • \n

    Certifications: Holding or actively working towards industry standards like CISSP, CCSP, CISM, CRISC, or Cloud Security Architect certs

    • \n
\n

Robert Walters Operations Limited is an employment business and employment agency and welcomes applications from all candidates