Security Engineer
Summary
The Senior Application Security Engineer will embed security into the SDLC and CI/CD pipelines, working with engineering teams to implement DevSecOps practices and secure cloud platforms. The role focuses on security automation, vulnerability management, and policy-as-code using tools like Python, Azure, and Kubernetes.
Security / Python / DevSecOps / Azure / Security Engineer
Role: Senior Application Security Engineer
Remote UK | 1 day per week in London
Salary: Up to £85,000
We’re looking for a Senior Application Security Engineer to join our security team and help embed security across the software development lifecycle.
This is a hands-on role working closely with engineering, cloud and architecture teams to drive a shift-left, DevSecOps approach and build secure applications and platforms.
The role
- Embed security into the SDLC and CI/CD pipelines, including GitHub Actions.
- Implement and operate SAST, DAST, IAST and SCA tooling.
- Secure applications, APIs, Kubernetes and containers.
- Develop security and policy-as-code capabilities using tools such as OPA.
- Help secure cloud and data platforms, including Databricks, Dagster and Snowflake.
- Support threat modelling and ISO 27001 activities.
- Operate and improve application security services and tooling.
- Work directly with developers to identify and remediate vulnerabilities.
About you
You’ll have strong hands-on experience in application security and ideally:
- Terraform and Python skills, with KQL advantageous.
- Experience securing GitHub/GitHub Actions, Kubernetes and APIs.
- Strong knowledge of application security testing and vulnerability management.
- Experience with DevSecOps, threat modelling and security automation.
- Knowledge of ISO 27001.
- Strong cloud security knowledge Azure (Preferred)
If you’re looking for a role where you can make a real impact on application security and work closely with engineering teams, we’d love to hear from you.
Security / Python / DevSecOps / Azure / Security Engineer