DevSecOps / Application Security Engineer

JR United Kingdom; Chester; Remote; GBP 60,000 - 90,000; Full time

Job summary

A leading niche SaaS Tech company in the UK is looking for a Senior DevSecOps / Application Security Engineer to lead their security initiatives. This role involves improving their SDLC and CI/CD pipelines and ensuring security is integrated into the software development process. The ideal candidate will have over 5 years of experience and a strong skill set in automation and application security.

Qualifications

• 5+ years in Application Security or DevSecOps with experience in secure SDLC and CI/CD.
• Hands-on experience with security tools required.
• Strong communication skills to liaise effectively with teams.

Responsibilities

• Automate security controls across CI/CD workflows.
• Integrate security tools into DevSecOps pipelines.
• Manage software vulnerability programs and bug bounty initiatives.

Skills

Automation

Application Security

DevSecOps

Secure Coding

Cloud Security

Scripting Languages

Communication

Tools

GitHub Advanced Security

Veracode

Snyk

ZAP

Burp

Job description

Social network you want to login/join with:

DevSecOps / Application Security Engineer, chester

col-narrow-left

Client:

Acumin

Location:

chester, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

3

Posted:

06.06.2025

Expiry Date:

21.07.2025

col-wide

Job Description:

Senior DevSecOps / Application Security Engineer

Location: Remote – UK or EMEA based

6 months+ Contract

Niche SaaS Tech company is seeking a Senior DevSecOps / Application Security Engineer to lead their DevSecOps initiatives—shaping secure software delivery in a fast-moving, cloud-native environment. You will own and improve security tooling and automation within their SDLC and CI/CD pipelines, collaborating closely with software engineers, DevOps, and data scientists. Your goal is to integrate security as a continuous, integral part of software development and deployment.

Responsibilities include:

• Automate security controls across CI/CD workflows
• Integrate SAST, DAST, SCA, and threat modeling tools into DevSecOps pipelines
• Work with developers to promote secure coding and privacy by design
• Implement and promote secure development standards across the organization
• Manage software vulnerability programs and bug bounty initiatives
• Continuously assess risks and improve security posture
• Support cloud-native application and ML security efforts on Azure and AWS
• Manage AppSec policies, incident response, and KPIs/KRIs

Key Skills Required:

• 5+ years in Application Security or DevSecOps, with experience in secure SDLC and CI/CD
• Hands-on experience with security tools like GitHub Advanced Security, Veracode, Snyk, ZAP, Burp
• Knowledge of OWASP, MITRE, CWE, and modern development frameworks (C#, Java, Python, React)
• Familiarity with scripting languages such as Python, Ruby, Rust
• Strong communication skills to liaise between technical teams and business stakeholders
• Passion for creating scalable security solutions that empower teams without slowing them down