Cytix Logo

Cytix

Application Security Engineer

Posted One Month Ago
Be an Early Applicant
Hybrid
Manchester, Greater Manchester, England, GBR
Junior
Hybrid
Manchester, Greater Manchester, England, GBR
Junior
Perform penetration testing across web applications, APIs, and mobile applications for clients. Identify vulnerabilities, support remediation with technical and non-technical stakeholders, conduct risk reviews of application changes, and collaborate with developers to strengthen application security and continuous security testing processes.
The summary above was generated by AI

We're looking for a Application Security Engineer to join our Manchester-based application security business as a member of the AppSec Engineering team
Cytix is a platform that threat models development tickets and creates security testing plans that include both manual and automated testing.

In this role, you won't be confined to traditional 4+1 web applications. We're breaking away from the constraints of CHECK or CE+ standards, and we're not interested in producing lengthy PDF reports. Instead, our focus is on seamlessly integrating continuous penetration testing into our customers' Software Development Life Cycle (SDLC).

Collaborating closely with both our in-house development team and clients, you'll play in pivotal role in driving penetration testing.


Having recently secured Series A funding this opportunity is genuinely one-of-a-kind for the right individual!

 

What you'll do

Operating as a Security Consultant specialising in Application Security (AppSec) Testing.

 
  • Penetration Testing web applications, APIs, mobile applications, etc for our clients across a range of industries.

  • Working with stakeholders of both a technical and non-technical nature to assist in vulnerability identification and remediations.

  • Performing risk reviews of application changes as part of our continuous security testing process.

  • You are comfortable collaborating with developers and external customers.

What you'll bring

  • 2+ years in Penetration Testing, Application Security Engineering, or a similar offensive security role.

What you'll get

  • Time off that works for you: Unlimited holiday policy, including a guaranteed 33 days plus your birthday off

  • Flexible hybrid working: Work in a way that helps you do your best work, while staying connected with the team.

  • A stake in what we’re building: Eligible employees can participate in our EMI share option scheme.

  • Healthcare that goes further: After one year’s service, access private healthcare through Vitality, including dental, optical, hearing and therapy cover.

  • More ways to get around: Access our company car salary-sacrifice scheme.

  • Support for growing families: Enhanced maternity and paternity leave.

About Cytix

  • Software never stops changing. Teams ship new code every day, through tickets, pull requests, releases, and increasingly with AI in the mix, but the way security keeps up with all that change hasn't really moved on.

  • That's the problem we're solving. Cytix helps organisations understand which software changes actually matter, what should happen next, and how to prove the right call was made. Security understood, in other words.

  • We're a small team with big plans, so every person we hire genuinely shapes what Cytix becomes. That's why we're upfront about our five values: we interview for all of them, and they matter to us more than a perfect CV. They're things you do, not things you are, so have a read and see if they sound like you.

    Make the first move. When the goal is clear but the path isn't, you get moving rather than waiting for perfect instructions. If you're blocked, you make a sensible call, say what you're assuming, and explain how you'd course-correct. We'd rather you act and be slightly wrong than sit still.

    Find the smarter path. You ask why before how. You dig into what the real problem is instead of just building what the spec says, and you're happy to question 'that's how it's always been done' when the reason behind it has gone stale.

    See it through. When something's yours, it lands. No loose ends, no surprises for whoever picks it up next. You keep people posted when things change, and if something falls between roles, you catch it.

    Raise the bar. You do the best job possible in the time you've got, whether that's a day or a month. Sometimes that means deep craft; sometimes the smartest move is quick and scrappy. It's about good judgement, and we hold each other to it without blame or politics.

    Play to win. You care about the mission but don't take yourself too seriously. You say 'I' when things go wrong and 'we' when they go right, trust teammates to do things their own way, and bring a bit of humour when the pressure's on.

    Sound like you on a normal working day? We'd love to meet you.

Cytix Manchester, England Office

Manchester, United Kingdom, M2 5LN,

Similar Jobs

10 Days Ago
In-Office
Salford, Greater Manchester, England, GBR
Expert/Leader
Expert/Leader
Healthtech
Leads application security strategy, tooling, automation, and secure-by-design practices across enterprise development environments. Integrates SCA, SAST, DAST, container security, code signing, and secret detection into CI/CD pipelines. Provides technical leadership, mentors application security engineers, supports platforms and incidents, develops metrics, and ensures alignment with ISO 27001, NIST, GDPR, and other regulatory requirements.
Top Skills: Ci/CdCode SigningContainer SecurityDevsecopsDynamic Application Security Testing (Dast)Infrastructure As CodePowershellPythonRest ApisSecret DetectionSoftware Composition Analysis (Sca)Static Application Security Testing (Sast)Terraform
One Month Ago
Easy Apply
Remote or Hybrid
United Kingdom
Easy Apply
Expert/Leader
Expert/Leader
Artificial Intelligence • Cloud • Computer Vision • Hardware • Internet of Things • Software
Lead Samsara’s vulnerability management and application security programs across cloud, firmware, IoT, and corporate systems. Define technical strategy, automate vulnerability detection and response, reduce remediation time, guide engineering teams, mentor security engineers, investigate critical vulnerabilities, and support incident response. The role requires strong AWS, programming, vulnerability management, application security testing, AI/LLM, and security automation expertise.
Top Skills: Ai/LlmAWSAws LambdaCC++Ci/CdCvssDastEpssFedrampFirmwareGoIotJavaScriptPythonSastScaSemgrepTinesWiz
20 Days Ago
In-Office
Entry level
Entry level
Marketing Tech • Software
Supports application security tooling, vulnerability management, cloud security monitoring, secure design and API reviews, threat modeling, penetration-test triage, and engineering engagement. The role involves using tools such as Aikido and Prisma Cloud, reviewing code and CI/CD pipelines, maintaining security processes, and independently prioritizing security requests and remediation activities.
Top Skills: AikidoCheckmarxCi/CdDastGCPGitlab CiPrisma CloudPythonSastScaSecrets ScanningSemgrepSnyk

What you need to know about the Manchester Tech Scene

Home to a £5 billion digital ecosystem, including MediaCity, which consists of major players like the BBC, ITV and Ericsson, Manchester is one of the U.K.'s top digital tech hubs, at the forefront of advancements in film, television and emerging sectors like as e-sports, while also fostering a community of professionals dedicated to pushing creative and technological boundaries.

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account