Location: Remote, UK (London office visit required per month with travel expenses covered separately)
Are you an Application Security Engineer who enjoys working directly with developers to build security into the way software is designed and shipped? This contract gives you scope to shape AppSec tooling, write and deploy controls, and help engineering teams adopt them across GitHub Actions, Azure and AKS.
You’ll support a health research organisation that works with public, charity and private sector partners to develop new ways to prevent, detect and treat disease. You’ll join a small Information Security team, working alongside a Senior AppSec Engineer and a Security Architect.
The Role
- Deploy and operate application security scanners, integrate them into CI/CD pipelines and help developers fix findings.
- Build and automate controls for Azure, AKS and container workloads using Python, Terraform and policy as code.
- Improve the secure development lifecycle through threat modelling, secure design reviews and practical API security guidance.
- Help secure data platforms including Databricks, Dagster and Snowflake.
- Work with engineering teams to roll out security tooling and document how to use it.
The Person
- Hands-on experience in Application Security, Product Security or DevSecOps, with examples of controls you’ve built and operated alongside software teams.
- Experience integrating application or dependency scanning into CI/CD, such as SAST, DAST, IAST or SCA.
- Practical Python and Terraform skills and experience securing Kubernetes or container workloads.
Experience with GitHub Actions, Azure and AKS is particularly relevant. Familiarity with OPA, Azure Policy or cloud data platform security would also be useful.
Please note the engagement is subject to BPSS and DBS checks.
Keywords: Senior Application Security Engineer, AppSec Engineer, Product Security Engineer, DevSecOps Engineer, Secure SDLC, GitHub Actions, CI/CD Security, SAST, DAST, IAST, SCA, Azure, AKS, Kubernetes Security, Python, Terraform, Policy as Code, API Security, Threat Modelling, Outside IR35, London
#J-18808-Ljbffr
Senior Application Security Engineer (£500 per day - Outside IR35) employer: TechSec Solutions Limited
TechSec Solutions Limited is an exceptional employer located in the vibrant town of Burgess Hill, West Sussex, offering a dynamic work culture that fosters innovation and collaboration. Employees benefit from competitive remuneration, comprehensive training programmes, and clear pathways for career advancement, making it an ideal place for those seeking meaningful and rewarding employment in the aviation sector.
