Cloud-Native Security Engineer: Azure, Kubernetes & CI/CD

Additional Resources; Greater London; Hybrid; GBP 70,000 - 80,000; Full time

Benefits offered by this job

Hybrid work model

Excellent benefits package

Job summary

Additional Resources is seeking a hands-on Application Security Engineer in Central London for a hybrid role. The position focuses on secure design, CI/CD security, cloud-native tech, Kubernetes, API security, code analysis and security-as-code, collaborating with engineering and cloud teams to build and maintain secure applications and deployment processes.

The role requires substantial security expertise with Azure, AKS, Terraform, Python, and experience in threat modelling and ISO 27001.

Qualifications

• Hands-on experience embedding application security into the SDLC.
• Experience securing APIs, internet-facing services and Kubernetes (AKS) and containerised environments.
• Experience with SAST, DAST, IAST and SCA tooling.
• Familiarity with security automation, policy-as-code and secure engineering practices.
• Experience with CI/CD tooling such as GitHub Actions.
• Strong Terraform and Python skills.
• Understanding of Azure security controls and cloud governance.
• Experience with threat modelling in software engineering contexts.
• Knowledge of ISO 27001 and secure engineering relevance.
• Familiarity with Agile and DevSecOps methodologies.
• Eligibility to work in the UK.

Responsibilities

• Collaborate with engineering and architecture teams to promote secure development from the earliest stages.
• Implement and maintain application security testing solutions enabling remediation of risks.
• Enhance secure development processes by integrating security controls into CI/CD pipelines.
• Strengthen security of GitHub Actions and other CI/CD platforms.
• Provide technical guidance on secure API design and protection of externally accessible systems.
• Support security of Azure cloud infrastructure including AKS.
• Protect cloud-hosted data platforms and related technologies.
• Develop and maintain security-as-code and policy-as-code using appropriate tooling.
• Automate security processes via infrastructure-as-code and scripting.
• Produce and maintain technical documentation and security procedures.
• Support development teams with adoption of security tooling and best practices.
• Contribute to wider cyber security initiatives including threat modelling and compliance.

Skills

Security in SDLC

API security

Kubernetes

Azure security

Terraform

Python

GitHub Actions

Threat modelling

ISO 27001 knowledge

Cloud security governance

Automation / security-as-code

Tools

GitHub Actions

Azure Kubernetes Service (AKS)

Terraform

SAST/DAST/IAST/SCA tooling

Job description

Additional Resources is seeking a hands-on Application Security Engineer in Central London for a hybrid role. The position focuses on secure design, CI/CD security, cloud-native tech, Kubernetes, API security, code analysis and security-as-code, collaborating with engineering and cloud teams to build and maintain secure applications and deployment processes.

The role requires substantial security expertise with Azure, AKS, Terraform, Python, and experience in threat modelling and ISO 27001.