We're partnering with a leading enterprise organisation looking for an experienced DevSecOps SME to take ownership of the design, implementation and rollout of application security scanning capabilities. This is a hands‑on engineering role where you'll have the opportunity to build and improve security practices across a large development environment. You'll work closely with software engineering and security teams to introduce automated security testing, improve vulnerability detection and embed security directly into development pipelines. What you'll be doing
Design, configure and implement enterprise application security scanning tools. Lead the rollout of SAST, DAST and SCA capabilities. Integrate automated security testing into CI/CD pipelines. Establish security quality gates, scanning standards and policies. Develop automation using Python, Bash, PowerShell and APIs.
Improve vulnerability triage processes and reduce false positives. Work directly with engineering teams to improve secure coding practices. What we’re looking for
Robust hands‑on experience in DevSecOps or Application Security Engineering. Proven experience implementing SAST, DAST and SCA tooling from the ground up. Experience with tools such as Snyk, Checkmarx, SonarQube, Veracode, Fortify or OWASP ZAP. Strong understanding of CI/CD environments, including GitHub Actions, GitLab, Jenkins or Azure DevOps. Good understanding of OWASP Top 10, vulnerability management and secure development practices. Experience automating security processes using scripting and APIs. Why consider this opportunity?
An opportunity to take ownership of a significant security engineering uplift, introduce new capabilities and make a genuine impact on how software is developed and secured across an enterprise organisation.