Cloud DevSecOps Application Security Engineer

Centrica plc; Windsor; Hybrid; GBP 65,000 - 95,000; Full time

Benefits offered by this job

Salary review and bonuses

Employee Energy Allowance 15%

Pension plan

Healthcare plan

25 days holiday + up to 5 extra days

Flexible benefits

Job summary

Centrica plc is seeking an experienced Application Security Engineer to strengthen secure development practices across its multi-cloud environment, focusing on AWS, Azure DevOps, and modern DevSecOps tooling. UK-based hybrid role with occasional travel to site.

You will lead security integration into the SDLC, guide secure design and architecture, and drive remediation across teams while contributing to a broader security culture and championing scalable security delivery.

Qualifications

• Strong hands-on experience in application security with a solid understanding of secure SDLC and OWASP Top 10.
• Proficiency in programming languages such as Python or JavaScript for security automation.
• Experience across cloud platforms (AWS, Azure) and modern DevSecOps tooling.

Responsibilities

• Collaborate with DevOps and engineering to embed security in the software development lifecycle.
• Provide guidance on secure design, API security, and cloud-native security patterns.
• Review SAST/DAST/ SCA outputs and drive remediation to closure.

Skills

OWASP Top 10

Secure SDLC

Python

JavaScript

Tools

Azure DevOps

GitHub Actions

Trivy

CycloneDX

Terraform

Bicep

Ansible

Job description

Centrica plc is seeking an experienced Application Security Engineer to strengthen secure development practices across its multi-cloud environment, focusing on AWS, Azure DevOps, and modern DevSecOps tooling. UK-based hybrid role with occasional travel to site.

You will lead security integration into the SDLC, guide secure design and architecture, and drive remediation across teams while contributing to a broader security culture and championing scalable security delivery.