Secure SDLC Lead – Application & Cloud Security (Contract)

Fruition Group; England; On-site; GBP 55,000 - 75,000; Full time

Job summary

A leading technology firm in the United Kingdom is looking for a Mid-Senior level security expert to strengthen their Secure Software Development Lifecycle (SDLC) within a complex environment. The role involves leading improvements aligned to NIST CSF 2.0, ensuring security controls are applied throughout projects, and acting as a trusted security advisor. Ideal candidates will need experience in application security, vulnerability management, and understanding cloud security principles. This contract position is ideal for motivated professionals eager to embed security in project lifecycles.

Qualifications

• Proven experience improving Secure SDLC maturity within complex environments.
• Strong knowledge of NIST CSF and secure-by-design principles.
• Hands-on capability across vulnerability management and security assessments.

Responsibilities

• Lead improvements to the Secure Software Development Lifecycle aligned to NIST CSF 2.0.
• Act as an Application Security / Project Guardian embedding security across delivery lifecycles.
• Validate that back-end and platform security controls are correctly implemented.

Skills

Improving Secure SDLC maturity

NIST CSF

Application security

Vulnerability management

Security assessments

Cloud security

Risk management

Tools

AWS

Kubernetes

APIs

IAM

Job description

A leading technology firm in the United Kingdom is looking for a Mid-Senior level security expert to strengthen their Secure Software Development Lifecycle (SDLC) within a complex environment. The role involves leading improvements aligned to NIST CSF 2.0, ensuring security controls are applied throughout projects, and acting as a trusted security advisor. Ideal candidates will need experience in application security, vulnerability management, and understanding cloud security principles. This contract position is ideal for motivated professionals eager to embed security in project lifecycles.