Application Security Engineer – Hybrid DevSecOps

Centrica; Clewer Village; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Market salary

Energy allowance 15%

Pension plan

Healthcare plan

25 days holiday + 5 optional

Flexible benefits

Job summary

Centrica is seeking an experienced Application Security Engineer to strengthen secure development practices across its multi‑cloud environment, with a focus on AWS, Azure DevOps and modern DevSecOps tooling. You will work with engineering, platform and security teams to reduce risk and enable secure, scalable delivery.

The role is UK-based with hybrid work and occasional travel to site. You will drive secure design, review security outputs, and advocate a strong security culture across

Qualifications

• Strong hands‑on experience in application security and secure SDLC practices.
• Proficiency in Python or JavaScript with code-driven security automation.
• Experience across AWS, Azure and cloud-native architectures; API security and container security understood.

Responsibilities

• Collaborate with DevOps and engineering teams to weave security best practices into the software development lifecycle.
• Provide guidance on secure design, implementation and architecture (API security, microservices).
• Conduct ongoing manual security assessments and coordinate third‑party engagements as needed.
• Review SAST, DAST and SCA outputs and drive remediation to closure.
• Provide on-demand application security support and drive continuous improvement of processes and tooling.
• Lead or contribute to Security Champions and coordinate with GSOC and CSIRT on incidents.

Skills

Application security

AWS/Azure DevSecOps

Programming Python/JS

Cloud platforms

CI/CD security

Security tooling

Tools

Azure DevOps

GitHub Actions

Trivy

CycloneDX

Terraform

Job description

Centrica is seeking an experienced Application Security Engineer to strengthen secure development practices across its multi‑cloud environment, with a focus on AWS, Azure DevOps and modern DevSecOps tooling. You will work with engineering, platform and security teams to reduce risk and enable secure, scalable delivery.

The role is UK-based with hybrid work and occasional travel to site. You will drive secure design, review security outputs, and advocate a strong security culture across