Hybrid London AppSec & DevSecOps Engineer

VIQU IT; City Of London; Hybrid; GBP 77,000 - 94,000; Full time

Benefits offered by this job

Referral bonus

Job summary

VIQU IT in London is recruiting an Applications Security & DevSecOps Specialist for a hybrid role. The position focuses on strengthening application security, embedding automated security testing into development pipelines, and managing external attack surface risks.

You will work with engineering, DevOps, and security teams to remediate vulnerabilities, support secure AI technologies, and improve security practices across the organisation.

Qualifications

• Proven experience in Application Security, DevSecOps, or a similar hands-on cyber security role.
• Experience with SAST, DAST, and SCA tools.
• Ability to integrate automated security testing into CI/CD pipelines.
• Experience with attack surface management and external exposure monitoring.
• Knowledge of CVSS and risk prioritisation frameworks.
• Awareness of AI security risks and secure AI practices.

Responsibilities

• Implement and manage application security testing across the software development lifecycle (SAST, DAST, SCA).
• Integrate automated security scanning and controls into CI/CD pipelines (shift-left security).
• Manage and validate application vulnerabilities through manual testing and remediation tracking.
• Oversee external attack surface management and risk identification of exposed assets.
• Configure and maintain security testing tools with effective coverage and reporting.
• Collaborate with development teams to improve secure coding practices.

Skills

Application Security

DevSecOps

CI/CD pipelines

Security communication

Tools

Checkmarx

Snyk

Semgrep

Burp Suite

OWASP ZAP

Job description

VIQU IT in London is recruiting an Applications Security & DevSecOps Specialist for a hybrid role. The position focuses on strengthening application security, embedding automated security testing into development pipelines, and managing external attack surface risks.

You will work with engineering, DevOps, and security teams to remediate vulnerabilities, support secure AI technologies, and improve security practices across the organisation.