Security Architect: DevSecOps & App Security

Colt Technology Services; Greater London; Hybrid; GBP 90,000 - 140,000; Full time

Benefits offered by this job

Flexible working hours

Work from home

Mentor program

Educational opportunities

Employee Assistance Program

Job summary

Colt Technology Services is seeking a Security Architect specialising in Application Security and DevSecOps in London. You will embed security across the software development lifecycle, implement SAST/DAST/SCA tooling, and ensure secure by design practices throughout CI/CD pipelines.

The role collaborates with Engineering, DevOps, Cloud and Risk teams. The candidate should have 5+ years in information security, strong knowledge of OWASP Top 10, and hands-on DevSecOps tooling experience.

Qualifications

• 5+ years in information security with focus on application security and DevSecOps
• Strong understanding of secure software development and OWASP Top 10
• Hands-on experience with DevSecOps tooling in CI/CD
• Experience with SAST/DAST/SCA and secrets scanning
• Experience contributing to security design reviews for apps/APIs
• Experience in penetration testing activities and remediation tracking
• Understanding of modern architectures (APIs, microservices, cloud-native)
• Knowledge of authentication and session management concepts
• Ability to translate vulnerabilities into business risk and remediation actions
• Strong collaboration with engineering teams and clear communication

Responsibilities

• Provide security architecture expertise for app security and DevSecOps across SDLC
• Contribute to secure target architecture aligned to Secure by Design
• Support integration of security controls into CI/CD pipelines (GitLab) with automated testing
• Design and implement application security controls (SAST, DAST, SCA, secrets scanning)
• Work with engineering teams to ensure DevSecOps adoption and secure coding
• Support security reviews and assurance activities for internal apps/services
• Identify and reduce risks from app vulnerabilities and insecure coding
• Coordinate third-party penetration testing of internet-facing apps
• Define test scope, track execution, and ensure remediation of findings
• Guide engineering on remediation and prioritisation of vulnerabilities
• Contribute to secure coding standards and patterns
• Ensure alignment with TSA, DORA and ISO27001 in app design/deployment
• Promote security-first culture and awareness
• Maintain awareness of emerging risks and translate into controls
• Produce and maintain architecture artefacts, standards, and guidance

Skills

Application security

DevSecOps

CI/CD security

SAST

DAST

SCA / dependency scanning

Secrets scanning

Secure coding practices

Communication

Collaboration with engineering

Education

Security-focused degree or equivalent

Tools

GitLab pipelines

Job description

Colt Technology Services is seeking a Security Architect specialising in Application Security and DevSecOps in London. You will embed security across the software development lifecycle, implement SAST/DAST/SCA tooling, and ensure secure by design practices throughout CI/CD pipelines.

The role collaborates with Engineering, DevOps, Cloud and Risk teams. The candidate should have 5+ years in information security, strong knowledge of OWASP Top 10, and hands-on DevSecOps tooling experience.