Senior Application Security Engineer / DevSecOps Engineer

About the role

You will join a well‑established health research organisation and charity, embedding application security throughout the software development lifecycle. The role works closely with engineering, architecture and cloud teams to ensure secure design, testing and delivery of applications on Microsoft Azure.

Key responsibilities

• Collaborate with engineering and architecture teams to promote secure development practices.
• Implement and maintain application security testing solutions, including SAST, DAST, IAST and SCA.
• Integrate security controls into CI/CD pipelines and strengthen GitHub Actions security.
• Provide guidance on secure API design and protect internet‑facing services.
• Support Azure cloud infrastructure, especially Azure Kubernetes Service (AKS), and develop security‑as‑code policies.
• Automate security processes using infrastructure‑as‑code, scripting and Terraform.

Required profile

• Hands‑on experience embedding application security into the SDLC.
• Proven experience with Microsoft Azure security controls and cloud security governance.
• Experience securing APIs, Kubernetes (preferably AKS) and containerised environments.
• Knowledge of security automation, policy‑as‑code and secure engineering practices.
• Eligibility to work in the UK (no visa sponsorship).

Required skills

• Microsoft Azure
• KQL (Kusto Query Language)
• GitHub Actions / CI‑CD pipelines
• Kubernetes / Azure Kubernetes Service (AKS)
• API security
• SAST, DAST, IAST, SCA
• Terraform
• Python
• Threat modelling
• ISO 27001 knowledge

What we offer

• Salary up to £80,000, DOE and negotiable.
• Predominantly remote / hybrid working with a London office.
• Full‑time permanent contract.
• Excellent benefits package.