DevSecOps / Application Security Engineer

JR United Kingdom; Swindon; Remote; EUR 60,000 - 80,000; Full time

Job summary

A niche SaaS tech company is seeking a Senior DevSecOps / Application Security Engineer to drive their DevSecOps initiatives and ensure security is embedded in their software development lifecycle. The position offers a chance to evolve security tooling and collaborate closely with cross-functional teams in a fast-paced, cloud-native environment.

Qualifications

• 5+ years in AppSec or DevSecOps.
• Hands-on experience with security tools.
• Excellent communication skills.

Responsibilities

• Automating security controls in CI/CD workflows.
• Integrating SAST, DAST, SCA tools.
• Collaborating with developers on secure coding.

Skills

Secure SDLC

CI/CD

Communication

Cloud Security

Automation

Scripting

Tools

GitHub Advanced Security

Veracode

Snyk

ZAP

Burp

Job description

Social network you want to login/join with:

DevSecOps / Application Security Engineer, Swindon, Wiltshire

Client: Acumin

Location: Swindon, Wiltshire, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views: 3

Posted: 06.06.2025

Expiry Date: 21.07.2025

Job Description:

Senior DevSecOps / Application Security Engineer

Location: Remote – UK or EMEA based

6 months+ Contract

Niche SaaS Tech company is seeking a Senior DevSecOps / Application Security Engineer to champion and drive their DevSecOps initiatives—shaping secure software delivery across a fast-moving, cloud-native environment. You will own and evolve security tooling and automation embedded in their SDLC and CI/CD pipelines, working closely with software engineers, DevOps, and data scientists. The goal is to ensure security is integrated into every stage of software development, not just a final step.

Responsibilities include:

• Embedding and automating security controls across CI/CD workflows
• Leading the integration of SAST, DAST, SCA, and threat modeling tools in DevSecOps pipelines
• Collaborating with developers to enable secure coding and privacy by design
• Driving adoption of secure development standards and practices across the organization
• Operating and evolving vulnerability management and bug bounty programs
• Working cross-functionally to identify risks and improve security posture
• Supporting cloud-native app and ML security efforts on Azure and AWS
• Owning AppSec policies, incident response processes, and related KPIs/KRIs

Key Skills Required:

• 5+ years in AppSec or DevSecOps, with strong experience in secure SDLC and CI/CD
• Hands-on knowledge of security tools like GitHub Advanced Security, Veracode, Snyk, ZAP, Burp
• Familiarity with OWASP, MITRE, CWE, and modern development frameworks (C#, Java, Python, React)
• Knowledge of scripting languages (Python, Ruby, Rust)
• Excellent communication skills to bridge technical and business stakeholders
• Passion for building scalable security solutions that enable teams without slowing them down