Lead Application Security Engineer – SaaS, CI/CD

Bestman Solutions. International; Greater London; On-site; GBP 90,000 - 140,000; Full time

Job summary

Bestman Solutions. International in the United Kingdom is seeking a Senior Application Security Engineer to own application security across the SDLC and embed security in CI/CD. It is a hands-on role that shapes secure development and scalable security controls without slowing delivery.

You will lead tooling for SAST/SCA, ASPM and software supply chain security, and work with engineers to improve secure coding practices and perform security assessments.

Qualifications

• Experience in application security, product security or DevSecOps in SaaS.
• Hands-on with CI/CD security tooling and secure design reviews.
• Knowledge of SAST, SCA, vulnerability mgmt and secure SDLC.

Responsibilities

• Own and strengthen application security across the SDLC and CI/CD.
• Lead security tooling for SAST, SCA, secrets scanning, container security.
• Manage ASPM and risk-based vulnerability prioritisation.
• Partner with engineering to drive secure coding and remediation.

Skills

Application Security

DevSecOps

CI/CD security

Threat Modelling

SAST

SCA

Vulnerability mgmt

Secure SDLC

Cloud Security

Tools

CI/CD tooling

SBOM tooling

Container security tooling

Kubernetes security tooling

Job description

Bestman Solutions. International in the United Kingdom is seeking a Senior Application Security Engineer to own application security across the SDLC and embed security in CI/CD. It is a hands-on role that shapes secure development and scalable security controls without slowing delivery.

You will lead tooling for SAST/SCA, ASPM and software supply chain security, and work with engineers to improve secure coding practices and perform security assessments.