Senior DevSecOps & Application Security Engineer

Sponsor Finder; Boston; Hybrid; GBP 91,000 - 114,000; Full time

Benefits offered by this job

Flexible remote options

Hybrid work model

Learning & Development opportunities

Job summary

Shift Technology is seeking an Application Security/DevSecOps Engineer to drive security across the software delivery lifecycle, from code to CI/CD. You will act as a first responder within Security Operations, triaging and remediating alerts while partnering with data scientists and engineers to keep security built in by design.

Ideal candidates have extensive experience in security operations, incident response, and cloud/SaaS security, with hands-on tooling and strong collaboration skills.

Qualifications

• Bachelor's degree in cybersecurity, CS, IT, or related field, or equivalent experience.
• 7+ years of experience in Security Operations, Incident Response, or similar security role.
• Experience with SIEM platforms (prefer Microsoft Sentinel) and at least one EDR platform.

Responsibilities

• Drive Secure by Design and threat modeling across the software delivery pipeline.
• Define and promote technical security policies, standards, and guidelines.
• Automate security testing (SAST, DAST, SCA) and manage vulnerability workflows.
• Monitor, triage, and respond to security alerts across environments.
• Lead incident response, containment, and post-incident reviews.
• Collaborate with engineering and infrastructure teams on remediation efforts.
• Participate in purple team exercises and ongoing security initiatives.
• Maintain documentation and metrics for security programs.

Skills

Security Operations

Incident Response

Cloud Security

Security Monitoring

Communication

Education

Bachelor's Degree in Cybersecurity/CS/IT

Tools

Microsoft Sentinel

EDR Platforms (MDfE/CrowdStrike/Cortex XDR)

GitHub Advanced Security

Tenable

Job description

Shift Technology is seeking an Application Security/DevSecOps Engineer to drive security across the software delivery lifecycle, from code to CI/CD. You will act as a first responder within Security Operations, triaging and remediating alerts while partnering with data scientists and engineers to keep security built in by design.

Ideal candidates have extensive experience in security operations, incident response, and cloud/SaaS security, with hands-on tooling and strong collaboration skills.