DevSecOps / Application Security Engineer

JR United Kingdom; Bournemouth; Remote; GBP 50,000 - 80,000; Full time

Job summary

A leading niche SaaS Tech company in the UK is looking for a Senior DevSecOps / Application Security Engineer to enhance their security initiatives and ensure that security is embedded throughout the software development lifecycle. This role involves collaborating with software engineers and driving the adoption of secure software delivery practices.

Qualifications

• 5+ years in Application Security or DevSecOps.
• Hands-on knowledge of security tools and modern development frameworks.
• Excellent communication skills to bridge technical and business stakeholders.

Responsibilities

• Embedding and automating security controls across CI/CD workflows.
• Leading the integration of security tools in DevSecOps pipelines.
• Collaborating with developers to enable secure coding.

Skills

Application Security

DevSecOps

Secure SDLC

CI/CD

Communication Skills

Tools

GitHub Advanced Security

Veracode

Snyk

ZAP

Burp

Job description

Social network you want to login/join with:

DevSecOps / Application Security Engineer, Bournemouth

Client: Acumin

Location: Bournemouth, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views: 3

Posted: 06.06.2025

Expiry Date: 21.07.2025

Job Description:

Senior DevSecOps / Application Security Engineer

Location: Remote – UK or EMEA based

6 months+ Contract

Niche SaaS Tech company are seeking a Senior DevSecOps / Application Security Engineer to champion and drive their DevSecOps initiatives—shaping secure software delivery across a fast-moving, cloud-native environment. In this role, you’ll own and evolve the security tooling and automation embedded in their SDLC and CI/CD pipelines, working closely with software engineers, DevOps, and data scientists. You'll help ensure security is not a final step—but an integral, continuous part of how they build and ship software.

Responsibilities include:

• Embedding and automating security controls across CI/CD workflows
• Leading the integration of SAST, DAST, SCA, and threat modeling tools in DevSecOps pipelines
• Collaborating with developers to enable secure coding and privacy by design
• Driving adoption of secure development standards and practices across the organization
• Operating and evolving software vulnerability management and bug bounty programs
• Working cross-functionally to identify risks and improve security posture continuously
• Supporting cloud-native app and ML security efforts across Azure and AWS
• Owning AppSec policies, incident response processes, and related KPIs/KRIs

Key Skills Required:

• 5+ years in Application Security or DevSecOps, with strong experience in secure SDLC and CI/CD
• Hands-on knowledge of security tools like GitHub Advanced Security, Veracode, Snyk, ZAP, Burp
• Familiarity with OWASP, MITRE, CWE, and modern development frameworks (C#, Java, Python, React)
• Knowledge of scripting languages (Python, Ruby, Rust)
• Excellent communication skills to bridge technical and business stakeholders
• Passion for building scalable security solutions that enable teams, not slow them down