Lead AppSec & DevSecOps Engineer - AI-First Security

Faria Education Group; Loughborough; On-site; GBP 90,000 - 150,000; Full time

Benefits offered by this job

Competitive compensation

Online learning platform

MacBook Pro provided

Team activities & events

Job summary

Faria Education Group in the United Kingdom is seeking a Lead Security/DevSecOps Engineer to drive the application security program across five products. This hands-on leadership role reports to the VP of Engineering and partners with the vCISO, DevOps, and engineering teams to raise security maturity.

You will stand up greenfield security practices, define a secure SDLC, deploy tooling, and lead incident response.

Qualifications

• 7+ years in application/product security and leading AppSec programs.
• AI knowledge and curiosity for proactive protection.
• Founding, hands-on roles with ambiguity and self-direction.
• Breadth across stacks: RoR, PHP/Laravel, .NET/C#, Python.
• Strong cloud security across AWS and Azure.
• Deep understanding of common vulnerability classes.
• Hands-on with AppSec tooling and CI/CD integration.
• Threat-modeling experience.
• Excellent communication and influencing skills.

Responsibilities

• Do deep-dive assessments to drive risk-based prioritisation.
• Stand up and own the application security program across five products.
• Define and embed a secure SDLC with design reviews and guardrails.
• Select, deploy, and operationalise AppSec tooling in CI/CD.
• Implement and operationalise secrets management across pipelines.
• Lead risk-based vulnerability management and remediation.
• Run threat modeling and security reviews for new architecture.
• Improve cloud security posture in AWS and Azure.
• Lead incident response for application-layer incidents.
• Build security awareness and a champions network.
• Ensure student-data privacy and regulatory obligations.
• Contribute metrics to the security roadmap.

Skills

AppSec leadership

Cloud security

Threat modeling

Secure coding

CI/CD security

Ruby on Rails

PHP/Laravel

.NET/C#

Python

SAST/DAST

GitHub Advanced Security

Tools

GitHub Advanced Security

Job description

Faria Education Group in the United Kingdom is seeking a Lead Security/DevSecOps Engineer to drive the application security program across five products. This hands-on leadership role reports to the VP of Engineering and partners with the vCISO, DevOps, and engineering teams to raise security maturity.

You will stand up greenfield security practices, define a secure SDLC, deploy tooling, and lead incident response.