Senior DevSecOps Engineer – Applications

Sanderson; Greater London; Hybrid; GBP 67,000 - 89,000; Full time

Job summary

Sanderson is seeking a Security Engineer (DevSecOps - Applications) to embed security into software delivery across three streams. This hands-on role will work alongside three senior engineers to ensure consistent security practices and fast remediation.

You'll set up security scanning in CI/CD, build reusable security modules, and review code and configurations for vulnerabilities. London onsite once a week with a six-month initial term.

Qualifications

• Hands-on software, DevOps or platform engineering with a security focus.
• Experience with CI/CD and security scanning tools (SAST, SCA, secrets, IaC and container scanning).
• Python or Bash and Terraform.
• AWS fundamentals including IAM, plus containers and Kubernetes knowledge.
• Good vulnerability management understanding (CVSS, EPSS).
• Clear written communication and cross-team collaboration.

Responsibilities

• Set up and tune security scanning in CI/CD pipelines and reduce false positives.
• Build shared security modules, policy libraries and templates for three teams.
• Review code, infrastructure-as-code and configurations for security issues.
• Handle day-to-day vulnerability management, including pen test findings and fixes.
• Oversee secrets management, certificates and access reviews; keep CAB records up to date.
• Be the go-to security contact and support delivery teams when priorities shift.

Skills

CI/CD security scanning

SAST/SCA/secrets/IaC/container scans

Python

Terraform

AWS IAM

Kubernetes

Vulnerability management

Clear written communication

Tools

SAST tools

SCA tools

IaC scanners

Container scanning tools

CI/CD platforms

Job description

Sanderson is seeking a Security Engineer (DevSecOps - Applications) to embed security into software delivery across three streams. This hands-on role will work alongside three senior engineers to ensure consistent security practices and fast remediation.

You'll set up security scanning in CI/CD, build reusable security modules, and review code and configurations for vulnerabilities. London onsite once a week with a six-month initial term.