Application Security Engineer

Delaney & Bourton; Warwick; Hybrid; GBP 53,000 - 65,000; Full time

Job summary

Delaney & Bourton is seeking an Application Security Engineer (DevSecOps) in Warwick with 90% remote work and 2 days a month on site. The role focuses on embedding security into development pipelines and early vulnerability detection to protect critical UK systems.

Responsibilities include integrating security tooling into SDLC/CI/CD, performing security testing, assessing risks in open-source components, guiding remediation with developers, and strengthening cloud security controls across Azure

Qualifications

• Hands-on application security or DevSecOps experience.
• Coding background with flexibility on language.

Responsibilities

• Integrate security tooling and controls into the SDLC and CI/CD pipelines.
• Security testing to identify vulnerabilities.
• Assess risks in open-source components, third-party libraries, packages.

Skills

Hands-on application security

DevSecOps

Coding background

Security testing tools

Azure security capabilities

Microsoft Defender for Endpoint

Cortex XDR

Secure SDLC

Tools

Azure

Defender for Endpoint

Cortex XDR

Job description

Security Engineer – Application Security | DevSecOps

Warwick 2 days a month, 90% home-based

Up to £65,000

We're looking to appoint an Application Security Engineer who wants to work on ensuring the security of a critical UK organisation, with a focus on SevSecOps to ensure security is built in to development pipelines and vulnerabilities are identified/resoved early.

The role supports continuous improvement of the organisation’s security posture through effective use of multi-cloud security tooling, application security controls and cloud-native security capabilities. This includes working closely with development teams to embed security tooling, strengthen secure development practices and support adoption of security controls throughout the software development lifecycle.

Key areas of focus:

• Integrating security tooling and controls into the SDLC and CI/CD pipelines.
• Security testing to identify vulnerabilities.
• Assessing risks in open-source components, third-party libraries, packages and build artefacts.
• Working with developers to prioritise remediation and strengthen secure coding practices.
• Improving cloud security controls and automating security processes across Azure or GCP.

I’m keen to hear from people with:

• Hands-on application security or DevSecOps experience.
• Coding background - we can be flexible on what language that is in.
• Experience with security testing tools and secure development practices.
• Practical experience with Azure security capabilities, plus Microsoft Defender for Endpoint and Cortex XDR (ideally). Microsoft security experience is essential.

This would suit someone who enjoys working directly with developers, solving technical security challenges and making secure delivery part of everyday engineering.