Senior Application Security Engineer / DevSecOps Engineer

Additional Resources; Greater London; Hybrid; GBP 80,000 - 90,000; Full time

Benefits offered by this job

Remote/Hybrid work in London

Salary £80k-£90k + benefits

Job summary

Additional Resources in London is seeking a Senior Application Security Engineer to integrate security across the SDLC. You will work with engineering, architecture and cloud teams to embed security into development practices.

The role supports Azure, Kubernetes (AKS), API security, and data platforms; hybrid/remote setup, salary £80,000–£90,000 with benefits, and UK work eligibility required; visa sponsorship not available.

Qualifications

• Hands-on experience embedding application security into the SDLC.
• Experience with Azure security controls and cloud governance.
• Experience with KQL.
• Experience securing APIs, Kubernetes (AKS) and containerised environments.
• Experience with SAST, DAST, IAST and SCA.
• Knowledge of security automation, policy-as-code and secure engineering practices.
• Familiarity with GitHub and GitHub Actions.
• Experience with Terraform and Python.
• Understanding of cloud security governance.
• Experience with threat modelling in software engineering contexts.
• Knowledge of ISO 27001 and its relevance to secure engineering.
• Exposure to Agile working environments and DevSecOps practices.
• Ideally experience securing data platforms such as Databricks, Dagster or Snowflake.
• Eligible to work in the UK.

Responsibilities

• Working with engineering and architecture teams to promote secure development.
• Implementing and maintaining application security testing solutions.
• Integrating security controls into CI/CD pipelines.
• Strengthening the security of GitHub Actions and similar CI/CD platforms.
• Providing guidance on secure API design and externally accessible systems.
• Supporting Azure cloud infrastructure, including Azure Kubernetes Service (AKS).
• Developing security-as-code and policy-as-code.
• Supporting the security of cloud-hosted data platforms.
• Automating security processes through infrastructure-as-code and scripting.
• Maintaining technical and security documentation.
• Supporting development teams with security tooling and best practices.
• Contributing to threat modelling and compliance activities.

Job description

Salary: £80,000 - 90,000 per year

Requirements

• Hands-on experience embedding application security into the SDLC.
• Experience with Microsoft Azure security controls and cloud security governance.
• Experience with KQL.
• Experience securing APIs, internet-facing services, Kubernetes, preferably AKS, and containerised environments.
• Experience with SAST, DAST, IAST and SCA.
• Knowledge of security automation, security-/policy-as-code and secure engineering practices.
• Familiarity with GitHub and GitHub Actions.
• Experience with Terraform and Python.
• Understanding of cloud security governance.
• Experience with threat modelling in software engineering contexts.
• Knowledge of ISO 27001 and its relevance to secure engineering.
• Exposure to Agile working environments and DevSecOps practices.
• Ideally experience securing data platforms such as Databricks, Dagster or Snowflake.
• Eligible to work in the UK.

Responsibilities

• Working with engineering and architecture teams to promote secure development.
• Implementing and maintaining application security testing solutions.
• Integrating security controls into CI/CD pipelines.
• Strengthening the security of GitHub Actions and similar CI/CD platforms.
• Providing guidance on secure API design and externally accessible systems.
• Supporting Azure cloud infrastructure, including Azure Kubernetes Service (AKS).
• Developing security-as-code and policy-as-code.
• Supporting the security of cloud-hosted data platforms.
• Automating security processes through infrastructure-as-code and scripting.
• Maintaining technical and security documentation.
• Supporting development teams with security tooling and best practices.
• Contributing to threat modelling and compliance activities.

Technologies

• API
• Azure
• CI/CD
• Cloud
• Databricks
• DevSecOps
• GitHub
• Support
• Kubernetes
• Python
• Security
• Snowflake
• Terraform
• Architect
• DevOps

More

We are a well-established health research organisation and charity supporting large-scale medical research. This is a full-time permanent role, predominantly remote/hybrid in London, offering benefits and a salary of £80,000, which may be negotiable for the right candidate. We are looking for a Senior Application Security Engineer to work closely with our engineering, architecture and cloud teams, helping us integrate security throughout the software development lifecycle and support the safe adoption of emerging technologies. Please only apply if you have the right to work in the UK, as visa sponsorship is not available.