Senior Application Security Engineer (£500 per day - Outside IR35)

TechSec Solutions Limited; Greater London; Hybrid; GBP 83,000 - 124,000; Part time

Job summary

TechSec Solutions Limited is seeking an experienced Application Security Engineer to work with developers in embedding security into software design and delivery. You will deploy scanners, integrate controls into CI/CD, and help teams adopt GitHub Actions, Azure and AKS across projects.

The role focuses on securing data platforms and building policy-as-code solutions, with emphasis on threat modelling and secure design reviews to raise the security posture across engineering teams.

Qualifications

• Hands-on experience in Application Security, Product Security or DevSecOps.
• Experience integrating application or dependency scanning into CI/CD (SAST, DAST, IAST or SCA).
• Practical Python and Terraform skills and experience securing Kubernetes or container workloads.

Responsibilities

• Deploy and operate application security scanners in CI/CD pipelines and help developers fix findings.
• Build and automate controls for Azure, AKS and container workloads using Python, Terraform and policy as code.
• Improve the secure development lifecycle through threat modelling, secure design reviews and practical API security guidance.
• Help secure data platforms including Databricks, Dagster and Snowflake.
• Work with engineering teams to roll out security tooling and document how to use it.

Skills

Application Security

DevSecOps

CI/CD integration

Python

Terraform

Kubernetes security

Tools

GitHub Actions

Azure

AKS

SAST

DAST

IAST

SCA

Policy as Code

Job description

Location: Remote, UK (London office visit required per month with travel expenses covered separately)

Are you an Application Security Engineer who enjoys working directly with developers to build security into the way software is designed and shipped? This contract gives you scope to shape AppSec tooling, write and deploy controls, and help engineering teams adopt them across GitHub Actions, Azure and AKS.

You’ll support a health research organisation that works with public, charity and private sector partners to develop new ways to prevent, detect and treat disease. You’ll join a small Information Security team, working alongside a Senior AppSec Engineer and a Security Architect.

The Role

• Deploy and operate application security scanners, integrate them into CI/CD pipelines and help developers fix findings.
• Build and automate controls for Azure, AKS and container workloads using Python, Terraform and policy as code.
• Improve the secure development lifecycle through threat modelling, secure design reviews and practical API security guidance.
• Help secure data platforms including Databricks, Dagster and Snowflake.
• Work with engineering teams to roll out security tooling and document how to use it.

The Person

• Hands-on experience in Application Security, Product Security or DevSecOps, with examples of controls you’ve built and operated alongside software teams.
• Experience integrating application or dependency scanning into CI/CD, such as SAST, DAST, IAST or SCA.
• Practical Python and Terraform skills and experience securing Kubernetes or container workloads.

Experience with GitHub Actions, Azure and AKS is particularly relevant. Familiarity with OPA, Azure Policy or cloud data platform security would also be useful.

Please note the engagement is subject to BPSS and DBS checks.

Keywords: Senior Application Security Engineer, AppSec Engineer, Product Security Engineer, DevSecOps Engineer, Secure SDLC, GitHub Actions, CI/CD Security, SAST, DAST, IAST, SCA, Azure, AKS, Kubernetes Security, Python, Terraform, Policy as Code, API Security, Threat Modelling, Outside IR35, London