About this role
Salary: £80,000 - 85,000 per year
Requirements
- Proven experience in Application Security, DevSecOps, or a similar hands-on cybersecurity role
- Strong experience with SAST, DAST, and SCA tools such as Checkmarx, Snyk, Semgrep, Burp Suite, or OWASP ZAP
- Experience integrating automated security testing and controls into CI/CD pipelines
- Ability to investigate, validate, and remediate application security vulnerabilities
- Experience with attack surface management, asset discovery, domain security, and external exposure monitoring
- Knowledge of vulnerability assessment tools such as Shodan and risk prioritisation frameworks including CVSS
- Strong understanding of secure software development practices, API security, and common application vulnerabilities
- Awareness of emerging AI security risks, including prompt injection, data poisoning, and vulnerabilities affecting large language models
- Familiarity with security frameworks such as OWASP Top 10 and MITRE ATLAS is advantageous
- Excellent communication and stakeholder management skills, with the ability to collaborate across technical teams
Responsibilities
- Implement and manage application security testing across the software development lifecycle, including SAST, DAST, and SCA
- Integrate automated security scanning and vulnerability controls into CI/CD pipelines, supporting a shift-left security approach
- Manage and validate application vulnerabilities through manual testing, risk assessment, and remediation tracking
- Oversee external attack surface management by identifying exposed assets, domains, misconfigurations, and security risks
- Configure and maintain application security and vulnerability scanning tools, ensuring effective coverage and reporting
- Work with development and engineering teams to address security vulnerabilities and improve secure coding practices
- Assess security risks associated with AI applications, large language models, and machine learning technologies
- Support implementation of AI security controls and explore opportunities to enhance cyber defence through automation
- Produce security metrics and reports covering vulnerabilities, remediation progress, and overall security posture
Technologies
- AI
- API
- CI/CD
- DevSecOps
- DevOps
- Exposed
- Support
- Machine Learning
- OWASP
- Security
More
We are partnering with a leading organisation to recruit an Application Security & DevSecOps Specialist for its cybersecurity function. This is a hands-on technical role focused on strengthening application security, embedding automated security testing into development pipelines, managing external attack surface risks, and supporting secure AI adoption. The role involves close collaboration with engineering, DevOps, and security teams. It is based in London with a hybrid arrangement requiring three days per week in the office, and offers a salary of up to £85,000. We also offer a referral reward of up to £1,000 for a successful referral, subject to terms.
last updated 46 week of 2026