Senior Application Security Engineer / DevSecOps Engineer

Do you have a background in Application Security, DevSecOps or Product Security, with hands-on experience embedding application security into the SDLC? If so, this could be an opportunity worth considering.Join a well-established health research organisation and charity supporting large-scale medical research.

You will work closely with engineering, architecture and cloud teams to integrate security throughout the software development lifecycle.

Microsoft Azure and KQL experience are essential, alongside relevant experience in CI/CD, Kubernetes, API security, security-as-code and security automation.

This is a hands-on application security role focused on secure design, application security testing and supporting development teams to build secure applications.



This is a full-time permanent role predominantly remote / hybrid in London offerings benefits and a salary of £80,000 which can be negotiable for right candidate.

Please only apply if you have right to work in the UK as Visa sponsorship is not available.

You will be responsible for:? Working with engineering and architecture teams to promote secure development.
? Implementing and maintaining application security testing solutions.
? Integrating security controls into CI/CD pipelines.
? Strengthening the security of GitHub Actions and similar CI/CD platforms.
? Providing guidance on secure API design and externally accessible systems.
? Supporting Azure cloud infrastructure, including Azure Kubernetes Service (AKS).
? Developing security-as-code and policy-as-code.
? Supporting the security of cloud-hosted data platforms.
? Automating security processes through infrastructure-as-code and scripting.
? Maintaining technical and security documentation.
? Supporting development teams with security tooling and best practices.
? Contributing to threat modelling and compliance activities.


Applications are welcomed from candidates with the required experience from backgrounds including:? App