Senior DevSecOps Security Architect – Banking (Hybrid)

Salt; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

Salt is seeking a Senior Application Security Consultant / DevSecOps Security Architect in London to lead security reviews and embed Secure SDLC across product teams. You will collaborate with software engineering, cloud and DevOps to ensure secure design, development and deployment of applications.

Key focus areas include threat modelling, CI/CD security, SAST/DAST/SCA, and security tooling across a large cloud environment.

Qualifications

• 8+ years in Cyber Security.
• Strong Application Security or DevSecOps experience.
• Experience working directly with software engineering teams.
• Experience embedding security into CI/CD pipelines.
• Strong knowledge of Secure SDLC.
• Experience conducting Threat Modelling sessions.
• Excellent stakeholder management and communication skills.
• Banking, Financial Services or regulated enterprise background.

Responsibilities

• Lead application security reviews across business-critical applications and cloud platforms.
• Conduct security architecture and secure design reviews.
• Perform application security risk assessments and define security requirements.
• Lead Threat Modelling workshops using STRIDE, MITRE ATT&CK or similar methodologies.
• Embed Secure SDLC principles into engineering teams.
• Integrate security tooling into CI/CD pipelines and DevSecOps processes.
• Review and analyse SAST, DAST and SCA findings.
• Work with development teams to prioritise vulnerability remediation.
• Define security testing requirements and support penetration testing activities.
• Produce security standards, technical guidance and best practice documentation.
• Act as the Application Security SME across multiple technology programmes.

Skills

Secure SDLC

Threat Modelling

Cloud Security

CI/CD

DevSecOps

Security Architecture

Risk Assessments

Stakeholder Management

Communication Skills

Banking domain experience

Tools

Checkmarx

Fortify

SonarQube

Veracode

Semgrep

Burp Suite

OWASP ZAP

Prisma Cloud

Aqua

Wiz

GitHub Actions

GitLab

Jenkins

Job description

Salt is seeking a Senior Application Security Consultant / DevSecOps Security Architect in London to lead security reviews and embed Secure SDLC across product teams. You will collaborate with software engineering, cloud and DevOps to ensure secure design, development and deployment of applications.

Key focus areas include threat modelling, CI/CD security, SAST/DAST/SCA, and security tooling across a large cloud environment.