DevSecOps / Application Security Engineer

JR United Kingdom; Colchester; Remote; GBP 60,000 - 85,000; Full time

Job summary

A leading niche SaaS Tech company is looking for a Senior DevSecOps / Application Security Engineer to drive their security initiatives. The role involves developing security automation within the SDLC, integrating security into software development, and managing vulnerability programs. Ideal candidates have 5+ years in AppSec or DevSecOps, are hands-on with security tools, and possess strong communication skills.

Qualifications

• 5+ years in AppSec or DevSecOps.
• Hands-on with security tools like GitHub Advanced Security, Veracode.
• Strong communication skills for stakeholder engagement.

Responsibilities

• Automate security controls across CI/CD workflows.
• Integrate SAST, DAST, SCA tools into pipelines.
• Manage vulnerability programs and bug bounty initiatives.

Skills

AppSec

DevSecOps

CI/CD

Secure SDLC

Scripting (Python, Ruby, Rust)

Stakeholder engagement

Tools

GitHub Advanced Security

Veracode

Snyk

ZAP

Burp

Job description

Social network you want to login/join with:

DevSecOps / Application Security Engineer, Colchester

Client:

Acumin

Location:

Colchester, United Kingdom

Job Category:

Other

EU work permit required:

Yes

Job Views:

3

Posted:

06.06.2025

Expiry Date:

21.07.2025

Job Description:

Senior DevSecOps / Application Security Engineer

Location: Remote – UK or EMEA based

6 months+ Contract

Niche SaaS Tech company seeking a Senior DevSecOps / Application Security Engineer to lead their DevSecOps initiatives, shaping secure software delivery in a cloud-native environment. You will own and develop security tooling and automation within their SDLC and CI/CD pipelines, collaborating with software engineers, DevOps, and data scientists to integrate security into the software development process.

Responsibilities include:

• Automate security controls across CI/CD workflows
• Integrate SAST, DAST, SCA, and threat modeling tools into pipelines
• Support secure coding practices and privacy by design
• Promote secure development standards organization-wide
• Manage vulnerability programs and bug bounty initiatives
• Identify risks and improve security posture continuously
• Support security efforts in cloud-native applications on Azure and AWS
• Manage AppSec policies, incident response, and KPIs/KRIs

Key Skills Required:

• 5+ years in AppSec or DevSecOps with experience in secure SDLC and CI/CD
• Hands-on with security tools like GitHub Advanced Security, Veracode, Snyk, ZAP, Burp
• Knowledge of OWASP, MITRE, CWE, and modern development frameworks (C#, Java, Python, React)
• Proficiency in scripting languages such as Python, Ruby, Rust
• Strong communication skills for stakeholder engagement
• Passion for scalable security solutions that enable teams