Cloud-Native AppSec Engineer

Centrica plc; Windsor; Hybrid; GBP 70,000 - 90,000; Full time

Benefits offered by this job

15% Employee Energy Allowance

Company pension

Fully-funded healthcare

Job summary

Centrica plc is hiring an Application Security Engineer in Windsor with a hybrid UK role. You will integrate security into the software delivery lifecycle, collaborate with DevOps and engineering teams, and drive secure design and architecture across AWS, Azure, and DevSecOps tooling.

You will review SAST/DAST/ SCA outputs, guide remediation, and help scale security practices while supporting incident response and the Security Champions program.

Qualifications

• Strong hands-on experience in application security and secure SDLC practices.
• Proficiency in Python or JavaScript with security automation experience.
• Experience with AWS and Azure DevOps; familiarity with modern DevSecOps tooling.
• Knowledge of SAST/DAST/SCA and container scanning, vulnerability management, and SBOM tooling.

Responsibilities

• Collaborate with DevOps and engineering to weave security into the software development lifecycle.
• Provide guidance on secure design, implementation, and architecture (API security, microservices, cloud-native apps).
• Lead or contribute to security reviews, remediation tracking, and risk prioritisation.
• Support Security Champions program and work with GSOC/CSIRT on incidents.

Skills

Application security

OWASP Top 10

Python

JavaScript

DevSecOps

Tools

Azure DevOps

GitHub Actions

SAST

DAST

SCA

Trivy

CycloneDX

Terraform

Bicep

Ansible

Job description

Centrica plc is hiring an Application Security Engineer in Windsor with a hybrid UK role. You will integrate security into the software delivery lifecycle, collaborate with DevOps and engineering teams, and drive secure design and architecture across AWS, Azure, and DevSecOps tooling.

You will review SAST/DAST/ SCA outputs, guide remediation, and help scale security practices while supporting incident response and the Security Champions program.