Role Overview
The AppSec Tooling team at Sky is responsible for enabling secure software development practices across the organisation. We build and operate platforms that support penetration testing activities, including the scheduling, organisation, and management of testing engagements, as well as capabilities for threat modelling, security reporting, and vulnerability remediation. This role requires strong hands‑on software security knowledge, the ability to investigate and respond to application‑level security vulnerabilities and incidents, and the confidence to influence engineering teams toward secure‑by‑design outcomes at scale.
Responsibilities
* Work closely with software engineering, platform, and DevOps teams to embed security into the end‑to‑end software delivery lifecycle across AWS‑based environments.
* Support and guide the secure development of cloud‑native applications, APIs, and backend services using technologies such as Python, JavaScript, and PHP.
* Provide practical guidance on secure application design, authentication, access control, secrets management, and resilient cloud architectures.
* Integrate security, testing, and automation controls into CI/CD pipelines and development workflows while maintaining a strong developer experience.
* Contribute to the development and maintenance of infrastructure as code, cloud automation, and scalable platform capabilities within AWS environments.
* Drive the adoption of engineering guardrails, reusable security patterns, and automation that enable teams to deliver securely and efficiently at scale.
* Support the identification, investigation, triage, and remediation of application and platform vulnerabilities in collaboration with engineering teams.
* Contribute to security incident response activities, including root cause analysis, remediation support, and continuous improvement initiatives.
* Work with platform and engineering teams to improve monitoring, logging, alerting, and observability practices across distributed systems.
* Promote a positive engineering and security culture through coaching, collaboration, knowledge sharing, and day‑to‑day engagement with development teams.
Qualifications
* Strong understanding of modern software engineering practices, secure development principles, and common application security risks.
* Experience developing and supporting cloud‑native applications using Python, JavaScript, and/or PHP within AWS‑based environments.
* Familiarity with designing and integrating RESTful APIs, backend services, and event‑driven architectures.
* Experience integrating security, testing, and automation controls into CI/CD pipelines and software delivery workflows.
* Hands‑on experience with infrastructure as code and cloud automation to provision and manage scalable AWS environments.
* Experience working with containerised applications and modern platform technologies in distributed systems.
* Understanding of secure authentication, access control, secrets management, and security best practices in cloud environments.
* Experience implementing monitoring, logging, alerting, and observability practices for operational resilience and troubleshooting.
* Ability to investigate, triage, and help remediate application and platform security issues in collaboration with engineering teams.
* Strong problem‑solving, collaboration, and communication skills, with the ability to work effectively across engineering, platform, and security teams in fast‑paced environments.
Benefits and Perks
* Free Sky TV or NOW package, including Sky Sports and Sky Cinema.
* Pension package with up to 9% employer contribution.
* Private healthcare with mental health support.
* Aviva Digital GP and dental insurance.
* Discounts on Sky products, including Sky Mobile, Sky Broadband, Sky Glass and Sky Protect.
* Sharesave and Tech schemes.
* A range of Sky VIP rewards and experiences.
Working Arrangements
This role is based in Osterley. Hybrid working expectations: 2 days in the office per week. The Osterley Campus is a 10‑minute walk from Syon Lane train station and offers free shuttle buses, bike shelters, subsidised restaurants, a gym, a cinema, a car wash and a beauty salon.
Equal Opportunity Employer
We’re an equal‑opportunity employer and value diversity at our company. We are a Disability Confident Accredited Employer and welcome and encourage applications from all candidates. We will look to ensure a fair and consistent experience for all and will make reasonable adjustments to support you where appropriate. Please flag any adjustments you need as early as you can.
Other Information
To be eligible for this role you must have the appropriate right to work in the UK. Sky does not offer sponsorship for this position.
Applicants who succeed may be asked to complete a criminal record check. Depending on the role and the nature of any convictions, we may withdraw the offer.
J-18808-Ljbffr