Application Security & DevSecOps Specialist

Application Security & DevSecOps SpecialistLondon – Hybrid (3DPW in office)Up to 85,000VIQU have partnered with a leading organisation seeking an Application Security & DevSecOps Specialist to join their cyber security function.

This is a hands-on technical role focused on strengthening application security, embedding automated security testing into development pipelines, and managing external attack surface risks. The successful candidate will work closely with engineering, DevOps, and security teams to identify and remediate vulnerabilities, whilst supporting the adoption of secure AI technologies and improving security practices across the organisation.

Key Responsibilities of the Application Security & DevSecOps Specialist:Implement and manage application security testing across the software development lifecycle, including SAST, DAST, and SCAIntegrate automated security scanning and vulnerability controls into CI/CD pipelines, supporting a shift-left security approachManage and validate application vulnerabilities through manual testing, risk assessment, and remediation trackingOversee external attack surface management, identifying exposed assets, domains, misconfigurations, and security risksConfigure and maintain application security and vulnerability scanning tools, ensuring effective coverage and reportingWork closely with development and engineering teams to address security vulnerabilities and improve secure coding practicesAssess security risks associated with AI applications, large language models, and machine learning technologiesSupport the implementation of AI security controls and explore opportunities to enhance cyber defence through automationProduce security metrics and reports covering vulnerabilities, remediation progress, and overall security postureKey Experience Required of the Application Security & DevSecOps Specialist:Proven experience in Application Security, DevSecOps, or a similar hands-on cyber security roleStrong experience with SAST, DAST, and SCA tools such as Checkmarx, Snyk, Semgrep, Burp Suite, or OWASP ZAPExperience integrating automated security testing and controls into CI/CD pipelinesDemonstrable ability to investigate, validate, and remediate application security vulnerabilitiesExperience with attack surface management, asset discovery, domain security, and external exposure monitoringKnowledge of vulnerability assessment tools such as Shodan and risk prioritisation frameworks including CVSSStrong understanding of secure software development practices, API security, and common application vulnerabilitiesAwareness of emerging AI security risks, including prompt injection, data poisoning, and vulnerabilities affecting large language modelsFamiliarity with security frameworks such as OWASP Top 10 and MITRE ATLAS would be advantageousExcellent communication and stakeholder management skills, with the ability to work collaboratively across technical teamsApply now to speak with VIQU IT in confidence, or reach out to Katie Dark via the VIQU IT website.

Do you know someone great? We’ll thank you with up to 1,000 if your referral is successful (terms apply). For more exciting roles and opportunities like this, please follow us on LinkedIn @VIQU IT Recruitment.

Report this job