Remote Application Security Engineer — Design & Architecture

Dev/Null Security; Sheffield; Remote; GBP 65,000 - 95,000; Full time

Job summary

Dev/Null Security, a UK-based cybersecurity consultancy, seeks an Application Security Engineer to lead end-to-end design and publish architecture patterns. You will collaborate with an enterprise architect and present to design authorities, ensuring solutions meet security standards across cloud-native and containerized environments.

The role emphasizes securing modern architectures, integrating AST/ SCA pipelines, and advising on risk-based security policies for code, dependencies, and build

Qualifications

• Significant application security experience across modern architectures and tooling.
• Experience with secure SDLC, threat modelling and policy design.
• Ability to architect and integrate AST/ SCA pipelines within CI/CD.

Responsibilities

• Provide assurance and oversight of security design for solutions.
• Align designs to reference architectures and enterprise standards.
• Consult on transformative security programmes and risk controls.
• Collaborate with engineers to remediate vulnerabilities and guide secure coding.
• Present designs to design authorities and senior stakeholders.

Skills

AppSec expertise

CI/CD security

Threat modelling

SAST/DAST/IAST

SBOM & vulnerability mgmt

Cloud-native

Kubernetes security

Security pipelines

Education

Bachelor or Master in cybersecurity/CS

CISSP/CISM or equivalent

SABSA or TOGAF (preferred)

Tools

Checkmarx

Invicti

Snyk

BlackDuck

Tenable

GitHub Actions

GitLab

Jenkins

Azure DevOps

Job description

Dev/Null Security, a UK-based cybersecurity consultancy, seeks an Application Security Engineer to lead end-to-end design and publish architecture patterns. You will collaborate with an enterprise architect and present to design authorities, ensuring solutions meet security standards across cloud-native and containerized environments.

The role emphasizes securing modern architectures, integrating AST/ SCA pipelines, and advising on risk-based security policies for code, dependencies, and build