Job Title

Sanderson G&D are working with a fast growing Cyber Security consultancy delivering secure, user-focused digital services for the UK Government. They’re looking for an experienced Application Security / DevSecOps Engineer to embed security at the heart of modern software delivery.This is a newly defined role focused on integrating security into the software development lifecycle (SDLC). You’ll play a critical part in shifting security left, guiding engineering teams, testing controls, and supporting secure design across a range of digital services.The RoleThis is far more than just an AppSec testing role. You’ll be embedded into agile product teams, helping them design and build secure digital services from the ground up.Your day-to-day might include:Conducting hands-on threat modelling and secure design reviewsTesting APIs and infrastructure manually and with tools like Burp Suite, ZAP, and NessusDriving secure-by-design principles across CI/CD pipelinesWorking across cloud-native platforms (AWS, Azure) and tooling (GitHub, Python, etc.)Collaborating with platform and DevOps teams to harden cloud environmentsSupporting the integration of security data into a centralised platform (Splunk) and developing dashboards to visualise risk across servicesYou’ll be a key player in embedding AppSec into a fast-moving digital environment with tangible real-world impact.What We’re Looking ForHands-on expertise in application and cloud security within CI/CD environmentsDeep understanding of cyber-attack methodologies, threat modelling, and security controlsExperience security testing APIs and infrastructure - both manually and using automated toolsFamiliarity with Splunk (or a willingness to learn) for visualising service-level risk and postureAbility to engage engineering teams in practical, developer-friendly waysProficient in Python or a similar language and confident using developer tooling like GitHubWhy This Role?High-impact work shaping the security of digital services that matterSignificant autonomy and opportunity to lead security best practices across teamsOpportunity to influence tooling, process, and cultureRemote working with limited travelLong-term progression in a growing, supportive businessSecurity Clearance: Must hold active SC clearanceWant to shape how modern digital services are secured?Apply now or get in touch for a confidential chat.