Senior Application Security Engineer — Remote/Hybrid (Azure, DevSecOps)

Additional Resources Ltd; Greater London; Hybrid; GBP 72,000 - 88,000; Full time

Benefits offered by this job

London office

Excellent benefits package

Job summary

Additional Resources Ltd is seeking a Senior Application Security Engineer to embed security across the SDLC within a health research organisation and charity.

You will collaborate with engineering, architecture and cloud teams to integrate robust security controls into CI/CD pipelines, design secure systems and lead API and cloud security governance using Microsoft Azure and KQL. The role is predominantly remote with London office presence and a competitive benefits package.

Qualifications

• Hands-on experience embedding application security into the SDLC.
• Experience with Microsoft Azure security controls and cloud security governance.
• Experience with KQL.
• Experience securing APIs, internet-facing services, Kubernetes, preferably AKS, and containerised environments.
• Experience with SAST, DAST, IAST and SCA.
• Knowledge of security automation, security-/policy-as-code and secure engineering practices.
• Familiarity with GitHub and GitHub Actions.
• Experience with Terraform and Python.
• Understanding of cloud security governance.
• Experience with threat modelling in software engineering contexts.
• Knowledge of ISO 27001 and its relevance to secure engineering.
• Exposure to Agile working environments and DevSecOps practices
• Ideally experience securing data platforms such as Databricks, Dagster or Snowflake
• Eligible to work in the UK.

Responsibilities

• Working with engineering and architecture teams to promote secure development.
• Implementing and maintaining application security testing solutions.
• Integrating security controls into CI/CD pipelines.
• Strengthening the security of GitHub Actions and similar CI/CD platforms.
• Providing guidance on secure API design and externally accessible systems.
• Developing security-as-code and policy-as-code.
• Supporting the security of cloud-hosted data platforms.
• Automating security processes through infrastructure-as-code and scripting.
• Maintaining technical and security documentation.
• Supporting development teams with security tooling and best practices.
• Contributing to threat modelling and compliance activities.

Skills

Hands-on application security

Azure security controls

KQL

CI/CD

API security

Kubernetes

SAST

DAST

IAST

SCA

security-as-code

policy-as-code

Terraform

Python

GitHub Actions

AKS

Databricks

Dagster

Snowflake

threat modelling

ISO 27001

Tools

GitHub Actions

Kubernetes

AKS

Terraform

Python

Databricks

Dagster

Snowflake

Job description

Additional Resources Ltd is seeking a Senior Application Security Engineer to embed security across the SDLC within a health research organisation and charity.

You will collaborate with engineering, architecture and cloud teams to integrate robust security controls into CI/CD pipelines, design secure systems and lead API and cloud security governance using Microsoft Azure and KQL. The role is predominantly remote with London office presence and a competitive benefits package.