DevSecOps / Application Security Engineer

JR United Kingdom; Chelmsford; Remote; GBP 65,000 - 90,000; Full time

Job summary

A niche SaaS technology company is seeking a Senior DevSecOps / Application Security Engineer for a 6-month contract. You will lead initiatives to enhance security in a cloud-native setting, ensuring secure software delivery through collaboration with teams and integrating tools into the development lifecycle. This role requires extensive experience in AppSec and hands-on skills with various security technologies.

Qualifications

• 5+ years in AppSec or DevSecOps, with secure SDLC and CI/CD experience.
• Hands-on with security tools and knowledge of OWASP and modern frameworks.
• Proficient in scripting languages and strong communication skills required.

Responsibilities

• Automate security controls across CI/CD workflows.
• Integrate security tools and promote secure development standards.
• Manage software vulnerability and improve security posture continuously.

Skills

AppSec

DevSecOps

CI/CD

Scripting Languages

Secure Coding

Tools

GitHub Advanced Security

Veracode

Snyk

ZAP

Burp

Job description

Social network you want to login/join with:

DevSecOps / Application Security Engineer, Chelmsford

Client: Acumin

Location: Chelmsford, UK or EMEA (Remote)

Job Category: Other

EU work permit required: Yes

Job Views: 3

Posted: 06.06.2025

Expiry Date: 21.07.2025

Job Description:

Senior DevSecOps / Application Security Engineer

Location: Remote – UK or EMEA based

6 months+ Contract

Niche SaaS Tech company seeking a Senior DevSecOps / Application Security Engineer to lead their DevSecOps initiatives, shaping secure software delivery in a cloud-native environment. You will own and enhance security tooling and automation within their SDLC and CI/CD pipelines, collaborating with software engineers, DevOps, and data scientists to embed security as a continuous part of software development.

You will:

• Automate security controls across CI/CD workflows
• Integrate SAST, DAST, SCA, and threat modeling tools in pipelines
• Work with developers on secure coding and privacy by design
• Promote secure development standards organization-wide
• Manage software vulnerability and bug bounty programs
• Identify risks and improve security posture continuously
• Support cloud-native app and ML security on Azure and AWS
• Manage AppSec policies, incident response, and KPIs/KRIs

Key Skills Required:

• 5+ years in AppSec or DevSecOps, with experience in secure SDLC and CI/CD
• Hands-on with security tools like GitHub Advanced Security, Veracode, Snyk, ZAP, Burp
• Knowledge of OWASP, MITRE, CWE, and modern dev frameworks (C#, Java, Python, React)
• Proficiency in scripting languages (Python, Ruby, Rust)
• Strong communication skills for tech and business stakeholders
• Passion for scalable security solutions that empower teams