Hybrid London: Application Security & DevSecOps Lead

VIQU Limited; City Of London; Hybride; GBP 77 000 - 94 000; Plein temps

Résumé du poste

VIQU Limited is seeking an Application Security & DevSecOps Specialist in London with hybrid working arrangements. The role focuses on strengthening application security, embedding automated security testing into development pipelines, and managing external attack surface risks.

You will collaborate with engineering, DevOps, and security teams to remediate vulnerabilities and advance secure AI practices.

Qualifications

• Hands-on Application Security/DevSecOps experience.
• Experience with SAST, DAST, and SCA in modern pipelines.
• Ability to investigate, validate, and remediate vulnerabilities.
• Experience in attack surface management and external exposure monitoring.
• Knowledge of vulnerability assessment tools and CVSS.
• Familiarity with secure SDLC and API security best practices.
• Awareness of AI security risks in large language models.
• Interest in AI security controls and automation opportunities.

Responsabilités

• Implement and manage application security testing across the software development lifecycle, including SAST, DAST, and SCA
• Integrate automated security scanning into CI/CD pipelines with shift-left security
• Manage and validate vulnerabilities via manual testing and remediation tracking
• Oversee external attack surface management and identify misconfigurations
• Configure and maintain application security and vulnerability scanning tools
• Collaborate with dev teams to address security vulnerabilities and improve secure coding
• Assess security risks of AI applications and ML technologies
• Support AI security controls and automation to strengthen defence
• Produce security metrics and reports on vulnerabilities and remediation progress

Connaissances

Application Security

DevSecOps

CI/CD security

Vulnerability remediation

Attack surface management

AI security awareness

OWASP Top 10 knowledge

MITRE ATLAS familiarity

Outils

Checkmarx

Snyk

Semgrep

Burp Suite

OWASP ZAP

Shodan

Description du poste

VIQU Limited is seeking an Application Security & DevSecOps Specialist in London with hybrid working arrangements. The role focuses on strengthening application security, embedding automated security testing into development pipelines, and managing external attack surface risks.

You will collaborate with engineering, DevOps, and security teams to remediate vulnerabilities and advance secure AI practices.