Senior Application Security Lead (DevSecOps & Shift-Left)

Secure Source; Greater London; On-site; GBP 70,000 - 110,000; Full time

Job summary

Secure Source is seeking an Application Security Specialist to embed security expertise across Europe and advance secure development practices. You will lead reviews on high-risk systems and act as the technical authority on application security, helping reduce vulnerability risk across internal and customer-facing solutions.

The role requires 3–5 years in related fields, hands-on review experience, and strong CI/CD security integration capabilities within a multinational environment.

Qualifications

• 3–5 years in application security, secure development or software engineering with a security focus.
• Hands-on experience conducting application security reviews.
• Experience implementing security in CI/CD processes.
• Experience working with development teams in an enterprise environment.
• Experience building or contributing to a security CoE or capability model.
• Experience integrating security across large-scale development programmes.
• Evidence of formal learning or certifications in secure development.

Responsibilities

• Embed application security expertise across Europe’s products and services.
• Lead security reviews on higher-risk systems and projects.
• Promote secure development practices across engineering teams.
• Act as a technical authority on application security and risk reduction.

Skills

SAST

DAST

SCA

Java

C/C++

CI/CD

Threat modelling

OWASP Top 10

API security

Fuzz testing

Secure AI development

SSDF

Vulnerability management

Education

Degree in computer science or related field

Secure development / application security certification

Cloud security certifications (AWS/Azure/GCP)

Tools

SAST tools

DAST tools

SCA tools

Job description

Secure Source is seeking an Application Security Specialist to embed security expertise across Europe and advance secure development practices. You will lead reviews on high-risk systems and act as the technical authority on application security, helping reduce vulnerability risk across internal and customer-facing solutions.

The role requires 3–5 years in related fields, hands-on review experience, and strong CI/CD security integration capabilities within a multinational environment.