Senior App Security Engineer (Remote)

Additional Resources; City Of London; Hybrid; GBP 72,000 - 88,000; Full time

Job summary

Additional Resources in London is seeking an experienced Application Security/DevSecOps engineer to embed security across the SDLC. You will collaborate with engineering, architecture and cloud teams to design secure software, implement testing solutions and integrate controls into CI/CD.

The role emphasizes hands-on security design, API protection and cloud security governance. Hybrid remote work in London is offered with a negotiable £80,000 salary for the right candidate; visa sponsorship is

Qualifications

• Hands-on experience embedding application security into the SDLC.
• Experience with Microsoft Azure security controls and cloud governance.
• Experience with KQL.
• Experience securing APIs, internet-facing services and Kubernetes (AKS).
• Experience with SAST, DAST, IAST and SCA.
• Knowledge of security automation and security-/policy-as-code.
• Familiarity with GitHub and GitHub Actions.
• Experience with Terraform and Python.
• Understanding of cloud security governance.
• Experience with threat modelling in software engineering contexts.
• Knowledge of ISO 27001 and its relevance to secure engineering.
• Exposure to Agile and DevSecOps practices.
• Experience securing data platforms like Databricks, Dagster or Snowflake.
• Eligible to work in the UK.

Responsibilities

• Work with engineering and architecture teams to promote secure development.
• Implement and maintain application security testing solutions.
• Integrate security controls into CI/CD pipelines.
• Strengthen security of GitHub Actions and similar CI/CD platforms.
• Provide guidance on secure API design and externally accessible systems.
• Support Azure cloud infrastructure, including AKS.
• Develop security-as-code and policy-as-code.
• Support security of cloud-hosted data platforms.
• Automate security processes via infrastructure-as-code and scripting.
• Maintain security documentation and tooling best practices.
• Contribute to threat modelling and compliance activities.

Skills

SDLC security

Azure security

KQL

CI/CD

SAST/DAST/IAST

Tools

GitHub Actions

Terraform

Python

AKS

Databricks

Dagster

Snowflake

Job description

Additional Resources in London is seeking an experienced Application Security/DevSecOps engineer to embed security across the SDLC. You will collaborate with engineering, architecture and cloud teams to design secure software, implement testing solutions and integrate controls into CI/CD.

The role emphasizes hands-on security design, API protection and cloud security governance. Hybrid remote work in London is offered with a negotiable £80,000 salary for the right candidate; visa sponsorship is