Application Security Lead — Secure SDLC & DevSecOps

Experis IT; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid working

Competitive salary

Annual bonus

Car allowance

Benefits

Job summary

Experis IT in London is seeking an Application Security Specialist to strengthen security across our enterprise software, partnering with engineering teams to embed security throughout the Software Development Life Cycle. You will drive a security-first culture within a complex European technology environment.

You will lead application security reviews, drive SAST/DAST/SCA, and help shape secure development standards while enabling DevSecOps across teams.

Qualifications

• 3-5 years' experience in Application Security, Secure Development, or Software Engineering with a security focus.
• Hands-on experience conducting application security reviews and assessments.
• Strong knowledge of application security principles and secure coding practices.
• Experience with SAST, DAST and SCA tools.
• Experience integrating security controls into CI/CD pipelines.
• Strong understanding of OWASP Top 10 and common vulnerability classes.
• Experience with API and web application security.
• Knowledge of threat modelling techniques.

Responsibilities

• Lead application security reviews for high-risk products and services.
• Conduct and oversee SAST, DAST, fuzz testing and API security assessments.
• Perform architecture, design and code security reviews.
• Assess applications against OWASP Top 10 and other industry standards.
• Translate findings into practical remediation plans and developer guidance.

Skills

Application security

Secure SDLC

CI/CD security

SAST/DAST/SCA

OWASP Top 10

API security

Threat modelling

Code comprehension: Java/C/C++/C#/Py

Cloud security

Education

Degree in Computer Science / Software Engineering / Cyber Security / Information Security

Tools

SAST tools

DAST tools

SCA tools

CI/CD tooling

Job description

Experis IT in London is seeking an Application Security Specialist to strengthen security across our enterprise software, partnering with engineering teams to embed security throughout the Software Development Life Cycle. You will drive a security-first culture within a complex European technology environment.

You will lead application security reviews, drive SAST/DAST/SCA, and help shape secure development standards while enabling DevSecOps across teams.