Scroll down to find the complete details of the job offer, including experience required and associated duties and tasks.
Our client is a global network and communications provider.
Our client provides network, voice and data centre services to thousands of businesses around the world, allowing them to focus on delivering their business goals instead of the underlying infrastructure.
Why we need this role
We are looking for a Security Architect specialising in Application Security and DevSecOps to join the Security and Resilience – Security Architecture team.
This role will act as a subject matter expert for secure software development and DevSecOps practices, supporting the integration of security controls into our client's development pipelines and ensuring applications are secure by design and by default.
The successful candidate will work closely with Engineering, DevOps, Cloud, SOC and Risk teams to embed security throughout the software development lifecycle, ensuring that our client's applications and services are designed, built and tested with security as a core requirement.
The role combines:
- Application security architecture and design
- DevSecOps pipeline integration and tooling
- Security assurance and governance across internally developed applications
You will play an important role in supporting:
- Secure software development practices across our client
- Security integration into CI/CD pipelines (GitLab)
- Reduction of vulnerabilities through automated scanning and testing
- Assurance of internet-facing applications through structured penetration testing activities
What you will do
- Provide security architecture expertise for application security and DevSecOps, supporting standards and best practices across the software development lifecycle
- Contribute to the target architecture for secure software development, aligned to our client's Secure by Design principles
- Support the integration of security controls into CI/CD pipelines (GitLab), including automated testing and policy enforcement
- Design and implement application security controls, including:
- Static Application Security Testing (SAST)
- Dynamic Application Security Testing (DAST)
- Software Composition Analysis xsabvtc (SCA) / dependency scanning
- Secrets and credentials scanning
- Work with engineering teams to ensure consistent adoption of DevSecOps practices and secure coding approaches
- Support security architecture reviews and assurance activities for internally developed applications and services
- Identify and help reduce risks related to application vulnerabilities, insecure coding practices and exposed credentials
- Support the coordination and execution of third-party penetration testing of our client's internet-facing applications
- Assist in defining test scope, tracking execution and ensuring remediation of findin
Please click on the apply button to read the full job description
Security Architect - DevSecOps + in Whitehall employer: Hackajob
Joining Google as a Security Platform Engineer in the UK Public Sector means becoming part of a dynamic and innovative team dedicated to delivering secure private cloud services for critical customers. With a strong emphasis on employee growth, you will have access to cutting-edge technology and collaborative opportunities that foster professional development. The inclusive work culture at Google encourages creativity and teamwork, making it an exceptional employer for those seeking meaningful and impactful work in a supportive environment.
