Application Security Engineer - Lead Secure SDLC (Hybrid)

Hyra; England; Hybrid; GBP 60,000 - 75,000; Full time

Benefits offered by this job

Hybrid working

Excellent benefits

Job summary

Hyra is seeking an experienced Application Security Engineer to strengthen security across a modern technology environment. You will embed security throughout the software development lifecycle, driving a shift-left approach and integrating automated security controls into CI/CD pipelines.

Working with development and DevOps teams, you will identify vulnerabilities early, improve secure coding practices and enhance security tooling.

Qualifications

• Experience in Application Security, DevSecOps and CI/CD pipelines.
• Hands-on with Checkmarx configuration, integration and vulnerability management.
• Knowledge of SAST, DAST, SCA and automated security testing.
• Understanding of cloud security, containers and modern app architectures.
• Familiarity with OWASP, ISO27001 and NCSC CAF.
• Awareness of emerging threats, AI security risks and software supply chain vulnerabilities.

Responsibilities

• Embed security throughout the software development lifecycle, driving a shift-left approach.
• Integrate automated security controls into CI/CD pipelines and tooling.
• Collaborate with development and DevOps teams to identify vulnerabilities early and improve secure coding practices.
• Enhance application security tooling and threat modelling across projects.

Skills

DevSecOps

CI/CD pipelines

Cloud security

Containers

OWASP

NCSC CAF

Tools

Checkmarx

Job description

Hyra is seeking an experienced Application Security Engineer to strengthen security across a modern technology environment. You will embed security throughout the software development lifecycle, driving a shift-left approach and integrating automated security controls into CI/CD pipelines.

Working with development and DevOps teams, you will identify vulnerabilities early, improve secure coding practices and enhance security tooling.