TipTopJob
Senior Application Security Engineer / DevSecOps Engineer
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Job Opportunity: Senior Application Security Engineer
Do you have a background in Application Security, DevSecOps or Product Security, with hands-on experience embedding application security into the SDLC? If so, this could be an opportunity worth considering. Join a well-established health research organisation and charity supporting large-scale medical research. You will work closely with engineering, architecture and cloud teams to integrate security throughout the software development lifecycle.
Key Responsibilities
- Working with engineering and architecture teams to promote secure development.
- Implementing and maintaining application security testing solutions.
- Integrating security controls into CI/CD pipelines.
- Strengthening the security of GitHub Actions and similar CI/CD platforms.
- Providing guidance on secure API design and externally accessible systems.
- Supporting Azure cloud infrastructure, including Azure Kubernetes Service (AKS).
- Developing security-as-code and policy-as-code.
- Supporting the security of cloud-hosted data platforms.
- Automating security processes through infrastructure-as-code and scripting.
- Maintaining technical and security documentation.
- Supporting development teams with security tooling and best practices.
- Contributing to threat modelling and compliance activities.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Essential Skills and Experience
- Microsoft Azure and KQL experience are essential.
- Relevant experience in CI/CD, Kubernetes, API security, security-as-code and security automation.
- Experience with SAST, DAST, IAST and SCA.
- Knowledge of security automation, security-/policy-as-code and secure engineering practices.
- Familiarity with GitHub and GitHub Actions.
- Experience with Terraform and Python.
- Understanding of cloud security governance.
- Experience with threat modelling in software engineering contexts.
- Knowledge of ISO 27001 and its relevance to secure engineering.
- Exposure to Agile working environments and DevSecOps practices.
- Ideally, experience securing data platforms such as Databricks, Dagster or Snowflake.
- Eligible to work in the UK.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
What We Offer
- GBP 80,000 DOE, negotiable.
- Predominantly remote / hybrid working.
- London office.
- Full-time permanent position.
- Excellent benefits package.
This is an excellent opportunity for a Senior Application Security Engineer where you can make a meaningful impact on the safe and effective adoption of emerging technologies.
Important Information
We endeavour to process your personal data in a fair and transparent manner. In applying for this role, Additional Resources will be acting in your best interest and may contact you in relation to the role, either by email, phone or text message. For more information, see our Privacy Policy on our website. It is important to note that Visa sponsorship is not available. Please only apply if you have the right to work in the UK.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location