DevSecOps / Application Security Engineer

JR United Kingdom; High Wycombe; Remote; GBP 60,000 - 90,000; Full time

Job summary

A leading SaaS Tech company seeks a Senior DevSecOps / Application Security Engineer to lead security initiatives in a cloud-native environment. The position involves enhancing security in software delivery processes, collaborating closely with developers, and managing security tools and standards to ensure robust application security.

Qualifications

• 5+ years in Application Security or DevSecOps with experience in secure SDLC and CI/CD.
• Hands-on experience with security tools like GitHub Advanced Security, Veracode, Snyk, ZAP, Burp.
• Strong communication skills to liaise between technical teams and business stakeholders.

Responsibilities

• Automate and embed security controls in CI/CD workflows.
• Integrate security tools into DevSecOps pipelines.
• Manage software vulnerability programs and bug bounty initiatives.

Skills

Application Security

DevSecOps

Secure SDLC

CI/CD

Scripting (Python, Ruby, Rust)

Communication

Security Tooling

Tools

GitHub Advanced Security

Veracode

Snyk

ZAP

Burp

Job description

Social network you want to login/join with:

DevSecOps / Application Security Engineer, high wycombe

col-narrow-left

Client:

Acumin

Location:

high wycombe, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

3

Posted:

06.06.2025

Expiry Date:

21.07.2025

col-wide

Job Description:

Senior DevSecOps / Application Security Engineer

Location: Remote – UK or EMEA based

6 months+ Contract

Niche SaaS Tech company is seeking a Senior DevSecOps / Application Security Engineer to lead their DevSecOps initiatives—shaping secure software delivery in a fast-moving, cloud-native environment. You will own and improve security tooling and automation within their SDLC and CI/CD pipelines, working closely with software engineers, DevOps, and data scientists. Your role will ensure security is integrated continuously into software development and deployment.

Responsibilities include:

• Automate and embed security controls in CI/CD workflows
• Integrate SAST, DAST, SCA, and threat modeling tools into DevSecOps pipelines
• Collaborate with developers to promote secure coding and privacy by design
• Establish and promote secure development standards across the organization
• Manage software vulnerability programs and bug bounty initiatives
• Identify risks and improve security posture through cross-functional collaboration
• Support cloud-native application and ML security in Azure and AWS
• Manage AppSec policies, incident response, and related KPIs/KRIs

Key Skills Required:

• 5+ years in Application Security or DevSecOps, with experience in secure SDLC and CI/CD
• Hands-on experience with security tools like GitHub Advanced Security, Veracode, Snyk, ZAP, Burp
• Knowledge of OWASP, MITRE, CWE, and modern development frameworks (C#, Java, Python, React)
• Proficiency with scripting languages such as Python, Ruby, Rust
• Strong communication skills to liaise between technical teams and business stakeholders
• Passion for developing scalable security solutions that enable, not hinder, teams