DevSecOps / Application Security Engineer

JR United Kingdom; Stevenage; Remote; GBP 60,000 - 90,000; Full time

Job summary

A leading company is seeking a Senior DevSecOps / Application Security Engineer to drive security initiatives in a cloud-native environment. This role requires collaboration with engineers to integrate security into the software development lifecycle, alongside managing vulnerability and incident response programs. Ideal candidates will possess extensive experience in application security with a hands-on approach to security tools and a passion for creating secure solutions.

Qualifications

• 5+ years in Application Security or DevSecOps.
• Hands-on experience with security tools.
• Strong communication skills.

Responsibilities

• Automating security controls in CI/CD workflows.
• Collaborating with developers for secure coding.
• Managing vulnerability programs.

Skills

Application Security

DevSecOps

SDLC

CI/CD

Security Tools

Scripting

Cloud Security

Stakeholder Engagement

Tools

GitHub Advanced Security

Veracode

Snyk

ZAP

Burp

Job description

Social network you want to login/join with:

DevSecOps / Application Security Engineer, Stevenage

Client: Acumin

Location: Remote – UK or EMEA based

Job Category: Other

EU work permit required: Yes

Job Views: 3

Posted: 06.06.2025

Expiry Date: 21.07.2025

Job Description:

Senior DevSecOps / Application Security Engineer

This role involves championing and driving DevSecOps initiatives, shaping secure software delivery in a cloud-native environment. You will own and evolve security tooling and automation in SDLC and CI/CD pipelines, working with software engineers, DevOps, and data scientists to ensure security is integrated into the software development process.

Responsibilities include:

• Automating security controls in CI/CD workflows
• Integrating SAST, DAST, SCA, and threat modeling tools into pipelines
• Collaborating with developers for secure coding and privacy by design
• Promoting secure development standards across the organization
• Managing vulnerability programs and bug bounty initiatives
• Continuously improving security posture by identifying risks
• Supporting cloud-native security efforts on Azure and AWS
• Managing AppSec policies, incident response, and KPIs/KRIs

Required Skills:

• 5+ years in Application Security or DevSecOps with experience in SDLC and CI/CD
• Hands-on experience with security tools like GitHub Advanced Security, Veracode, Snyk, ZAP, Burp
• Knowledge of OWASP, MITRE, CWE, and modern frameworks (C#, Java, Python, React)
• Familiarity with scripting languages such as Python, Ruby, Rust
• Strong communication skills for stakeholder engagement
• Passion for scalable security solutions that enable teams