Security Architect: App Security & DevSecOps | Flexible

Colt Technology Services; City Of London; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Flexible working hours

Work from home option

Induction program

Development opportunities

Global Family Leave Policy

Employee Assistance Program

Inclusion networks

Job summary

Colt Technology Services is seeking a Security Architect specializing in Application Security and DevSecOps to embed security across the software development lifecycle. You will drive secure coding, CI/CD integration and risk-based remediation across Colt's applications and services.

You will collaborate with Engineering, DevOps, Cloud and Risk teams to ensure security by design and by default. Strong communication and governance skills are essential to promote a security-first culture.

Qualifications

• 5+ years in information security with focus on application security and DevSecOps.
• Experience with secure SDLC and common application security risks (OWASP Top 10).
• Hands-on with DevSecOps tooling in CI/CD environments, e.g. GitLab pipelines.
• Experience in security testing: SAST, DAST, SCA and secrets scanning.
• Ability to translate vulnerabilities into remediation actions.

Responsibilities

• Provide security architecture expertise for application security and DevSecOps across the SDLC.
• Lead integration of security controls into CI/CD pipelines and automated testing.
• Design security controls including SAST/DAST/SCA and secrets scanning.
• Support secure coding practices and conduct security reviews for APIs and services.
• Coordinate third-party penetration testing and remediation tracking.

Skills

Application security

DevSecOps

GitLab pipelines

SAST

DAST

SCA / dependencies

Secrets scanning

Tools

GitLab

CI/CD tooling

Job description

Colt Technology Services is seeking a Security Architect specializing in Application Security and DevSecOps to embed security across the software development lifecycle. You will drive secure coding, CI/CD integration and risk-based remediation across Colt's applications and services.

You will collaborate with Engineering, DevOps, Cloud and Risk teams to ensure security by design and by default. Strong communication and governance skills are essential to promote a security-first culture.