At a Glance
- Tasks: Integrate security into software development and support teams in building secure applications.
- Company: Established health research charity focused on large-scale medical research.
- Benefits: Competitive salary, remote/hybrid work, and opportunities for professional growth.
- Other info: Join a dynamic team with excellent career advancement opportunities.
- Why this job: Make a real impact on the safe adoption of emerging technologies in healthcare.
- Qualifications: Experience in application security, Azure, CI/CD, Kubernetes, and API security.
Do you have a background in Application Security, Dev Sec Ops or Product Security, with hands-on experience embedding application security into the SDLC If so, this could be an opportunity worth considering.
Join a well-established health research organisation and charity supporting large-scale medical research.
You will work closely with engineering, architecture and cloud teams to integrate security throughout the software development lifecycle.
Microsoft Azure and KQL experience are essential, alongside relevant experience in CI/CD, Kubernetes, API security, security-as-code and security automation.
This is a hands-on application security role focused on secure design, application security testing and supporting development teams to build secure applications.
This is a full-time permanent role predominantly remote / hybrid in London offerings benefits and a salary of £80,000 which can be negotiable for right candidate.
Please only apply if you have right to work in the UK as Visa sponsorship is not available.
You will be responsible for
- Working with engineering and architecture teams to promote secure development.
- Implementing and maintaining application security testing solutions.
- Integrating security controls into CI/CD pipelines.
- Strengthening the security of Git Hub Actions and similar CI/CD platforms.
- Providing guidance on secure API design and externally accessible systems.
- Supporting Azure cloud infrastructure, including Azure Kubernetes Service (AKS).
- Developing security-as-code and policy-as-code.
- Supporting the security of cloud-hosted data platforms.
- Automating security processes through infrastructure-as-code and scripting.
- Maintaining technical and security documentation.
- Supporting development teams with security tooling and best practices.
- Contributing to threat modelling and compliance activities. Applications are welcomed from candidates with the required experience from backgrounds including:
- Application Security Engineer, Dev Sec Ops Engineer, Product Security Engineer, Security Engineer - Application Security, Security Engineer - Product Security, Dev Ops Security Engineer, Application Security Consultant, Security Engineer - Dev Sec Ops, Secure Software Engineer, Application Security Specialist, Application Security Architect What we are looking for:
- Hands-on experience embedding application security into the SDLC.
- Experience with Microsoft Azure security controls and cloud security governance.
- Experience with KQL.
- Experience securing APIs, internet-facing services, Kubernetes, preferably AKS, and containerised environments.
- Experience with SAST, DAST, IAST and SCA.
- Knowledge of security automation, security-/policy-as-code and secure engineering practices.
- Familiarity with Git Hub and Git Hub Actions.
- Experience with Terraform and Python.
- Understanding of cloud security governance.
- Experience with threat modelling in software engineering contexts.
- Knowledge of ISO 27001 and its relevance to secure engineering.
- Exposure to Agile working environments and Dev Sec Ops practices
- Ideally experience securing data platforms such as Databricks, Dagster or Snowflake
- Eligible to work in the UK.
This is an excellent opportunity for a Senior Application Security Engineer where you can make a meaningful impact on the safe and effective adoption of emerging technologies.
Important
Information: We endeavour to process your personal data in a fair and transparent manner.
In applying for this role, Additional Resources will be acting in your best interest and may contact you in relation to the role, either by email, phone or text message.
For more information see our Privacy Policy on our website.
It is important you are aware of your individual rights and the provisions the company has put in place to protect your data.
If you would like further information on the policy or GDPR please contact us.
Additional Resources are an Employment Business and an Employment Agency as defined within The Conduct of Employment Agencies & Businesses Regulations 2003
Senior Application Security Engineer / DevSecOps Engineer in London employer: Additional Resources
Join a forward-thinking company that values innovation and technical excellence, where as a Senior Platform Engineer, you will play a pivotal role in scaling a pioneering platform. With a strong emphasis on employee growth, collaborative work culture, and the opportunity to lead cutting-edge projects, this position offers a unique chance to make a meaningful impact in a dynamic environment. Located in a vibrant area, the company provides excellent benefits and fosters a culture of continuous learning and development.
StudySmarter Expert Advice🤫
We think this is how you could land Senior Application Security Engineer / DevSecOps Engineer in London
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including Additional Resources, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through Additional Resources
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at Additional Resources. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace Senior Application Security Engineer / DevSecOps Engineer in London
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at Additional Resources insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to Additional Resources that you’re committed to staying ahead in the game.
How to prepare for a job interview at Additional Resources
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at Additional Resources to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at Additional Resources.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
