Hybrid Application Security Engineer - Azure/.NET

TyneStack Ltd; Newcastle upon Tyne; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Hybrid work pattern

Collaborative security culture

Opportunity to influence DevSecOps

Job summary

TyneStack Ltd is seeking an Application Security Engineer to embed security across a substantial .NET/Azure environment. You will partner with developers and security specialists to identify vulnerabilities, improve secure coding, and ensure security is designed into enterprise applications.

The role emphasises hands-on security assessments, threat modelling, and integrating security into Azure DevOps CI/CD pipelines, with a focus on DevSecOps maturity and secure architecture reviews.

Qualifications

• Experience securing apps in Microsoft Azure.
• Strong knowledge of OWASP principles and Top 10.
• Experience with .NET stack, including C# and APIs.
• Experience with SAST, DAST and software composition analysis tools.
• Knowledge of authentication/identity tech (OAuth2, OpenID Connect, Entra ID).

Responsibilities

• Embed security controls across the SDLC.
• Conduct secure design reviews for .NET apps, APIs and cloud services.
• Perform SAST/DAST and SCA testing.
• Identify and remediate vulnerabilities.
• Integrate security tooling into Azure DevOps CI/CD pipelines.
• Define secure coding standards aligned with OWASP.
• Conduct threat modelling and security assessments.
• Review Azure configurations and identity management.
• Improve application security monitoring with Defender/Sentinel.
• Collaborate with dev teams to improve DevSecOps maturity.

Skills

Azure security

OWASP Top 10

C# / .NET

SAST/DAST

DevSecOps

Azure DevOps

Threat modelling

Azure Key Vault

Microsoft Defender

Security monitoring

APIs security

CI/CD pipelines

Tools

SonarQube

Tenable

Job description

TyneStack Ltd is seeking an Application Security Engineer to embed security across a substantial .NET/Azure environment. You will partner with developers and security specialists to identify vulnerabilities, improve secure coding, and ensure security is designed into enterprise applications.

The role emphasises hands-on security assessments, threat modelling, and integrating security into Azure DevOps CI/CD pipelines, with a focus on DevSecOps maturity and secure architecture reviews.