Application Security Engineer – 6‑month Contract (Outside IR35)

About the role

We are looking for an experienced DevSecOps Security Engineer to build an application security capability that enables secure software delivery while minimising disruption to development teams. The role is remote, outside IR35, and runs for six months.

Key responsibilities

• Collaborate with developers, DevOps engineers and technology stakeholders to understand current development practices.
• Introduce practical security controls and deploy application security tooling.
• Establish processes for identifying, prioritising and remediating vulnerabilities across applications, source code and cloud‑native workloads.
• Embed security into the Software Development Lifecycle (SDLC) and improve visibility of application risks.
• Ensure vulnerability management aligns with organisational policies.

Required profile

• Proven experience as a DevSecOps or Application Security Engineer.
• Strong understanding of secure software delivery and SDLC integration.
• Ability to work closely with development and operations teams.
• Experience managing vulnerabilities in cloud‑native environments.

Required skills

• DevSecOps
• Application security tooling
• Vulnerability management
• Cloud‑native workloads
• Secure Software Development Lifecycle (SDLC)