Application security engineer in medical research

Do you have a background in Application Security, DevSecOps or Product Security, with hands:on experience embedding application security into the SDLC? If so, this could be an opportunity worth considering.Join a well:established health research organisation and charity supporting large:scale medical research. You will work closely with engineering, architecture and cloud teams to integrate security throughout the software development lifecycle.

• Working with engineering and architecture teams to promote secure development.
• Implementing and maintaining application security testing solutions.
• Integrating security controls into CI/CD pipelines.
• Strengthening the security of GitHub Actions and similar CI/CD platforms.
• Providing guidance on secure API design and externally accessible systems.
• Supporting Azure cloud infrastructure, including Azure Kubernetes Service (AKS).
• Developing security:as:code and policy:as:code.
• Supporting the security of cloud:hosted data platforms.
• Automating security processes through infrastructure:as:code and scripting.
• Maintaining technical and security documentation.
• Supporting development teams with security tooling and best practices.
• Contributing to threat modelling and compliance activities.

• Hands:on experience embedding application security into the SDLC.
• Experience with Microsoft Azure security controls and cloud security governance.
• Experience with KQL.
• Experience securing APIs, internet:facing services, Kubernetes, preferably AKS, and containerised environments.
• Experience with SAST, DAST, IAST and SCA.
• Knowledge of security automation, security:/policy:as:code and secure engineering practices.
• Familiarity with GitHub and GitHub Actions.
• Experience with Terraform and Python.
• Understanding of cloud security governance.
• Experience with threat modelling in software engineering contexts.
• Knowledge of ISO 27001 and its relevance to secure engineering.
• Exposure to Agile working environments and DevSecOps practices
• Eligible to work in the UK.
• Будет плюсом: Ideally experience securing data platforms such as Databricks, Dagster or Snowflake

• A GBP 80,000 DOE, negotiable
• Predominantly remote / hybrid working
• London office
• Full:time permanent position
• Excellent benefits package