Avios Group (AGL) Limited

We're looking for a talented and passionate Senior Application Security Engineer to join our security engineering team. You'll have a background in software engineering and a deep interest in application and API security. You thrive on collaboration, enjoy helping others grow, and see security as an enabler - not a blocker. You'll be an AppSec advocate who supports our engineers in identifying and addressing security issues across the software development lifecycle. Responsibilities Lead the application security practice within the Loyalty division security team, taking responsibility for key security KPIs in this area. Champion secure software development by working closely with engineers and product teams, embedding security practices into our engineering culture. Provide training, offer expert advice, and drive awareness of security from the earliest stages of design through to deployment. Help integrate automated security tooling and checks into our CI/CD pipelines, facilitate threat modelling sessions, and review security sensitive design decisions around authentication, cryptography, and logging. Ensure tools such as SAST, DAST, and SCA are effective and efficient, and that testing programmes-including pen testing, vulnerability scanning, and bug bounty-are delivering value. Triage vulnerabilities, support engineering teams with practical mitigations, and contribute to documentation that strengthens our internal standards and processes. Maintain a strong security culture and support internal and external audits where needed. Qualifications Experience in software engineering, with a strong security mindset. Deep understanding of web and API vulnerabilities, including the OWASP Top 10. Proficient in coding, scripting (e.g., Python, Bash), and automating security in CI/CD. Hands on experience with security tools like SAST, DAST, and SCA. Familiar with cloud environments (especially AWS), containers, and microservices. Comfortable reviewing technical designs, performing threat modelling, and advising on secure architecture. Strong communicator who collaborates well with engineers and promotes secure by default practices. We might not be right for you if you only want to focus on your to do list, lack fast iteration, or want to create but not build. This is an end to end role where you need to own your space from ideation through delivery and review. This role will work as part of our Loyalty Division and is based out of our London office. We call our approach to hybrid working "The Blend" it's about giving you the flexibility to choose where you do your best work, while staying connected with your team. You should be prepared to spend at least two days per week in the office, with the rest of the time working from home. We actively encourage applications from people with different experiences and backgrounds and are committed to ensuring our recruitment process is fair, inclusive, and accessible.

Avios Group (AGL) Limited is seeking a Senior Application Security Engineer to join their security engineering team in London. You will lead the application security practice within the Loyalty division, champion secure software development, and collaborate closely with engineers and product teams. The ideal candidate has a strong background in software engineering, a deep understanding of web and API vulnerabilities, and experience with security tools. This is a hybrid role where you will have the flexibility to work from home while being connected with your team.

About the role We're IAG Loyalty - a team focused on the world wide Avios loyalty platform, connecting millions of members to travel, retail and financial services. As a Full Stack Engineer you'll work in a cross functional product team to build and improve features in both React Native and .NET/C#. Responsibilities Contribute to the development of features across the Avios App, working closely with mobile and backend teams. Own end to end development cycles - from implementation and testing to deployment and ongoing improvements. Partner with engineers, QA, Product Managers and Designers to deliver high quality functionality that meets customer and business needs. Participate in code reviews, technical discussions and team ceremonies, while learning from more experienced engineers. Take on increasing ownership and impact over time across both mobile and backend development. Qualifications Experience building applications in a commercial engineering environment. Strong experience in either React Native or .NET/C# with working knowledge of the other. Interest in developing full stack capability across mobile and backend systems. Understanding of APIs and modern development practices. Exposure to cloud platforms - AWS preferred. Strong communication and collaboration skills. A proactive mindset and willingness to learn and grow. Location & Working Style Role is based in our London office with a hybrid model, requiring a minimum of two days in the office. Remote work is also available depending on workload. Diversity & Inclusion We actively encourage applications from people with diverse backgrounds and experiences, and we are committed to ensuring our recruitment process is fair, inclusive and accessible.

Avios Group (AGL) Limited is looking for a Full Stack Engineer to enhance the Avios App. This role involves both mobile and backend development, requiring collaboration with cross-functional teams and an innovative mindset. The position offers a hybrid working style from the London office, with at least two days in the office, as well as opportunities for remote work based on workload. Join us to help shape the future of the Avios loyalty platform.

Avios Group (AGL) Limited is seeking a Senior Full Stack Engineer to deliver complex features for the Avios App. You will work on both mobile and backend systems, utilizing your deep expertise in React Native or .NET/C# while collaborating with a high-performing team. This hybrid role requires you to work in our London office at least two days per week. We're looking for someone who is comfortable taking ownership from ideation through delivery and review.