Security Architect - DevSecOps & App Security

Colt Technology Services Group Ltd.; Greater London; On-site; GBP 90,000 - 140,000; Full time

Benefits offered by this job

Flexible hours

Work from home

Induction program

Development opportunities

Global Family Leave Policy

Job summary

Colt Technology Services Group Ltd. is seeking an experienced Security Architect with a focus on Application Security and DevSecOps to join the Security Architecture team in a global context.

You’ll embed security controls into Colt’s development pipelines and ensure secure-by-design software across the SDLC. You will collaborate with Engineering, DevOps, Cloud, SOC and Risk teams to drive secure coding practices, perform security assessments, and coordinate third-party penetration testing for

Qualifications

• 5+ years of information security with focus on app security and DevSecOps
• Secure software development practices and OWASP Top 10 knowledge
• Hands-on DevSecOps tooling in CI/CD (GitLab pipelines)
• Experience with app security testing: SAST, DAST, SCA, Secrets scanning
• Security design reviews for applications/APIs
• Pen-testing participation and remediation tracking
• Understanding of modern app architectures (APIs, microservices, cloud-native)
• Knowledge of auth and session management
• Risk assessments aligned to recognised frameworks
• Translate vulnerabilities into business risk and remediation actions
• Collaboration with engineering teams and clear communication

Responsibilities

• Provide security architecture expertise for app security and DevSecOps across SDLC
• Contribute to secure software development target architecture
• Integrate security controls into CI/CD pipelines with automated testing and policy enforcement
• Design and implement app security controls (SAST, DAST, SCA, Secrets)
• Ensure DevSecOps adoption across engineering teams
• Support security reviews for internal apps/services
• Identify and reduce risks from vulnerabilities and insecure coding
• Coordinate third-party app penetration testing activities
• Define test scope and track remediation of findings
• Provide remediation guidance to engineering teams
• Develop and maintain secure coding standards and patterns
• Ensure alignment with TSA, DORA, ISO27001 in design/deploy
• Promote security-first culture in development teams
• Monitor emerging risks/tech and translate to controls
• Produce architecture artefacts and guidance documentation

Skills

InfoSec

App Security

DevSecOps

CI/CD

SAST

DAST

SCA

Secrets Scanning

APIs

Tools

GitLab

Job description

Colt Technology Services Group Ltd. is seeking an experienced Security Architect with a focus on Application Security and DevSecOps to join the Security Architecture team in a global context.

You’ll embed security controls into Colt’s development pipelines and ensure secure-by-design software across the SDLC. You will collaborate with Engineering, DevOps, Cloud, SOC and Risk teams to drive secure coding practices, perform security assessments, and coordinate third-party penetration testing for