DevSecOps / Application Security Engineer

JR United Kingdom; Slough; Remote; GBP 60,000 - 100,000; Full time

Job summary

A niche SaaS Tech company in the UK is looking for a Senior DevSecOps / Application Security Engineer. The individual will lead security initiatives to enhance secure software delivery within a cloud-native environment, optimizing security tools in CI/CD processes. This role offers a collaborative approach, ensuring security is embedded throughout the software development lifecycle.

Qualifications

• 5+ years in AppSec or DevSecOps with secure SDLC and CI/CD experience.
• Hands-on with various security tools and modern development frameworks.
• Excellent communication to connect technical and business stakeholders.

Responsibilities

• Embed security controls across CI/CD workflows.
• Integrate security tools into DevSecOps pipelines.
• Support cloud-native app and ML security efforts across Azure and AWS.

Skills

AppSec

DevSecOps

Secure SDLC

CI/CD

Communication

Security Tools

Scripting Languages

Tools

GitHub Advanced Security

Veracode

Snyk

ZAP

Burp

Job description

Social network you want to login/join with:

DevSecOps / Application Security Engineer, slough

col-narrow-left

Client:

Acumin

Location:

slough, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

3

Posted:

06.06.2025

Expiry Date:

21.07.2025

col-wide

Job Description:

Senior DevSecOps / Application Security Engineer

Location: Remote – UK or EMEA based

6 months+ Contract

Niche SaaS Tech company is seeking a Senior DevSecOps / Application Security Engineer to champion and drive their DevSecOps initiatives—shaping secure software delivery across a fast-moving, cloud-native environment. This role involves owning and evolving security tooling and automation embedded in their SDLC and CI/CD pipelines, working closely with software engineers, DevOps, and data scientists. The goal is to ensure security is an integral, continuous part of software development and deployment.

You will:

• Embed and automate security controls across CI/CD workflows
• Lead the integration of SAST, DAST, SCA, and threat modeling tools in DevSecOps pipelines
• Collaborate with developers to enable secure coding and privacy by design
• Drive adoption of secure development standards and practices across the organization
• Operate and evolve software vulnerability management and bug bounty programs
• Work cross-functionally to identify risks and continuously improve security posture
• Support cloud-native app and ML security efforts across Azure and AWS
• Own AppSec policies, incident response processes, and related KPIs/KRIs

Key Skills Required:

• 5+ years in AppSec or DevSecOps, with strong experience in secure SDLC and CI/CD
• Hands-on knowledge of security tools like GitHub Advanced Security, Veracode, Snyk, ZAP, Burp
• Familiarity with OWASP, MITRE, CWE, and modern development frameworks (C#, Java, Python, React)
• Knowledge of scripting languages (Python, Ruby, Rust)
• Excellent communication skills to bridge technical and business stakeholders
• Passion for building scalable security solutions that enable teams without slowing them down