Application Security Engineer

Security Engineer – Application Security | DevSecOps

Warwick 2 days a month, 90% home-based

Up to £65,000

We're looking to appoint an Application Security Engineer who wants to work on ensuring the security of a critical UK organisation, with a focus on SevSecOps to ensure security is built in to development pipelines and vulnerabilities are identified/resoved early.

The role supports continuous improvement of the organisation’s security posture through effective use of multi-cloud security tooling, application security controls and cloud-native security capabilities. This includes working closely with development teams to embed security tooling, strengthen secure development practices and support adoption of security controls throughout the software development lifecycle.

Key areas of focus:

• Integrating security tooling and controls into the SDLC and CI/CD pipelines.
• Security testing to identify vulnerabilities.
• Assessing risks in open-source components, third-party libraries, packages and build artefacts.
• Working with developers to prioritise remediation and strengthen secure coding practices.
• Improving cloud security controls and automating security processes across Azure or GCP.

I’m keen to hear from people with:

• Hands-on application security or DevSecOps experience.
• Coding background - we can be flexible on what language that is in.
• Experience with security testing tools and secure development practices.
• Practical experience with Azure security capabilities, plus Microsoft Defender for Endpoint and Cortex XDR (ideally). Microsoft security experience is essential.

This would suit someone who enjoys working directly with developers, solving technical security challenges and making secure delivery part of everyday engineering.