DevSecOps / Application Security Engineer

JR United Kingdom; West Midlands Combined Authority; Remote; GBP 70,000 - 90,000; Full time

Job summary

A niche SaaS tech company is seeking a Senior DevSecOps / Application Security Engineer for a 6-month remote contract, focusing on secure software delivery. The role encompasses developing security tooling, embedding security practices in CI/CD workflows, and enhancing overall security posture within cloud environments.</p>

Qualifications

• 5+ years in Application Security or DevSecOps experience is essential.
• Hands-on experience with the specified security tools.
• Strong communication skills to connect technical and business aspects.

Responsibilities

• Automate security controls in CI/CD workflows.
• Integrate security tools into DevSecOps pipelines.
• Manage software vulnerability programs and bug bounty initiatives.

Skills

Secure SDLC

CI/CD

Python

Scripting

Communication

DevSecOps

Tools

GitHub Advanced Security

Veracode

Snyk

ZAP

Burp

Job description

Social network you want to login/join with:

DevSecOps / Application Security Engineer, West Midlands

Client: Acumin

Location: UK or EMEA (Remote)

Job Category: Other

EU work permit required: Yes

Job Views: 3

Posted: 06.06.2025

Expiry Date: 21.07.2025

Job Description:

Senior DevSecOps / Application Security Engineer

Location: Remote – UK or EMEA based

6 months+ Contract

Niche SaaS Tech company seeking a Senior DevSecOps / Application Security Engineer to lead their DevSecOps initiatives—shaping secure software delivery in a fast-moving, cloud-native environment. You will own and develop security tooling and automation within their SDLC and CI/CD pipelines, working closely with software engineers, DevOps, and data scientists. Your goal is to make security an integral, continuous part of software development and deployment.

Responsibilities include:

• Automate and embed security controls in CI/CD workflows
• Integrate SAST, DAST, SCA, and threat modeling tools into DevSecOps pipelines
• Collaborate with developers to promote secure coding and privacy by design
• Drive the adoption of secure development standards across the organization
• Manage software vulnerability programs and bug bounty initiatives
• Identify risks and improve security posture continuously
• Support cloud-native application and ML security efforts on Azure and AWS
• Manage AppSec policies, incident response, and related KPIs/KRIs

Key Skills Required:

• 5+ years in Application Security or DevSecOps, with experience in secure SDLC and CI/CD
• Hands-on experience with security tools like GitHub Advanced Security, Veracode, Snyk, ZAP, Burp
• Knowledge of OWASP, MITRE, CWE, and modern development frameworks (C#, Java, Python, React)
• Proficiency in scripting languages such as Python, Ruby, Rust
• Excellent communication skills for bridging technical and business stakeholders
• Passion for building scalable security solutions that empower teams