DevSecOps / Application Security Engineer

JR United Kingdom; Preston; Remote; GBP 60,000 - 90,000; Full time

Job summary

A leading tech company is seeking a Senior DevSecOps / Application Security Engineer to drive security initiatives within a cloud-native environment. You will collaborate with teams to enhance secure software delivery, implement security tooling, and foster secure coding practices. This position is remote for candidates based in the UK or EMEA.

Qualifications

• 5+ years in Application Security or DevSecOps.
• Hands-on experience with security tools.
• Knowledge of OWASP, MITRE, and modern development frameworks.

Responsibilities

• Embed and automate security controls across CI/CD workflows.
• Lead integration of security tools in DevSecOps pipelines.
• Manage software vulnerability management and bug bounty programs.

Skills

Application Security

DevSecOps

CI/CD

Secure SDLC

Scripting languages

Communication

Tools

GitHub Advanced Security

Veracode

Snyk

ZAP

Burp

Job description

Social network you want to login/join with:

DevSecOps / Application Security Engineer, preston, lancashire

col-narrow-left

Client:

Acumin

Location:

preston, lancashire, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

3

Posted:

06.06.2025

Expiry Date:

21.07.2025

col-wide

Job Description:

Senior DevSecOps / Application Security Engineer

Location: Remote – UK or EMEA based

6 months+ Contract

Niche SaaS Tech company is seeking a Senior DevSecOps / Application Security Engineer to lead their DevSecOps initiatives—shaping secure software delivery in a fast-moving, cloud-native environment. You will own and enhance security tooling and automation within their SDLC and CI/CD pipelines, collaborating closely with software engineers, DevOps, and data scientists. The goal is to integrate security as a continuous, integral part of software development and deployment.

You will:

• Embed and automate security controls across CI/CD workflows
• Lead the integration of SAST, DAST, SCA, and threat modeling tools in DevSecOps pipelines
• Collaborate with developers to promote secure coding and privacy by design
• Drive the adoption of secure development standards and practices across the organization
• Manage and improve software vulnerability management and bug bounty programs
• Identify risks and enhance security posture through cross-functional collaboration
• Support cloud-native application and ML security efforts on Azure and AWS
• Maintain AppSec policies, incident response processes, and monitor related KPIs/KRIs

Key Skills Required:

• 5+ years in Application Security or DevSecOps, with strong experience in secure SDLC and CI/CD
• Hands-on experience with security tools such as GitHub Advanced Security, Veracode, Snyk, ZAP, Burp
• Knowledge of OWASP, MITRE, CWE, and modern development frameworks (C#, Java, Python, React)
• Proficiency with scripting languages like Python, Ruby, Rust
• Excellent communication skills to liaise effectively with technical and business stakeholders
• A passion for building scalable security solutions that empower teams without hindering productivity