Get AI-powered advice on this job and more exclusive features.
Sanderson Government & Defence provided pay range
This range is provided by Sanderson Government & Defence. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.
Base pay range
Direct message the job poster from Sanderson Government & Defence
Talent Solutions Partner | National Security & Central Government
Sanderson G&D are working with a fast growing Cyber Security consultancy delivering secure, user-focused digital services for the UK Government. They’re looking for an experienced Application Security / DevSecOps Engineer to embed security at the heart of modern software delivery.
This is a newly defined role focused on integrating security into the software development lifecycle (SDLC). You’ll play a critical part in shifting security left, guiding engineering teams, testing controls, and supporting secure design across a range of digital services.
The Role
This is far more than just an AppSec testing role. You’ll be embedded into agile product teams, helping them design and build secure digital services from the ground up.
* Conducting hands-on threat modelling and secure design reviews
* Testing APIs and infrastructure manually and with tools like Burp Suite, ZAP, and Nessus
* Driving secure-by-design principles across CI/CD pipelines
* Working across cloud-native platforms (AWS, Azure) and tooling (GitHub, Python, etc.)
* Collaborating with platform and DevOps teams to harden cloud environments
* Supporting the integration of security data into a centralised platform (Splunk) and developing dashboards to visualise risk across services
You’ll be a key player in embedding AppSec into a fast-moving digital environment with tangible real-world impact.
What We’re Looking For
* Hands-on expertise in application and cloud security within CI/CD environments
* Deep understanding of cyber-attack methodologies, threat modelling, and security controls
* Experience security testing APIs and infrastructure - both manually and using automated tools
* Familiarity with Splunk (or a willingness to learn) for visualising service-level risk and posture
* Ability to engage engineering teams in practical, developer-friendly ways
* Proficient in Python or a similar language and confident using developer tooling like GitHub
Why This Role?
* High-impact work shaping the security of digital services that matter
* Significant autonomy and opportunity to lead security best practices across teams
* Opportunity to influence tooling, process, and culture
* Remote working with limited travel
* Long-term progression in a growing, supportive business
Security Clearance: Must hold active SC clearance
Want to shape how modern digital services are secured?
Apply now or get in touch for a confidential chat.
Seniority level
* Seniority level
Mid-Senior level
Employment type
* Employment type
Full-time
Job function
* Job function
Consulting, Information Technology, and Engineering
* Industries
IT Services and IT Consulting
Referrals increase your chances of interviewing at Sanderson Government & Defence by 2x
Get notified about new Application Security Engineer jobs in England, United Kingdom.
Service Delivery Engineer CyberSecurity - Graduate
London, England, United Kingdom 2 weeks ago
London, England, United Kingdom 1 month ago
London, England, United Kingdom 1 week ago
London, England, United Kingdom 1 week ago
Senior Security Engineer (Application & Infrastructure)
London, England, United Kingdom 1 day ago
We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.
#J-18808-Ljbffr