Application Security Engineer - DevOps Tooling & Guidance

Tesco Plc; Welwyn Garden City; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

A leading retail company in the UK seeks a Security Engineer for Application Security. You will drive security strategies and support engineering teams with tooling to prevent security issues. The ideal candidate will have expertise in programming languages and application security practices, and experience in a DevOps environment. This role offers attractive annual bonuses and comprehensive benefits including private medical insurance and generous holiday allowance.

Benefits

Annual bonus scheme up to 20% of base salary

Holiday starting at 25 days plus personal day

Private medical insurance

26 weeks maternity/adoption leave at full pay

Free 24/7 virtual GP service

Qualifications

• Strong expertise in at least one programming language.
• Experience deploying security tooling into a DevOps environment.
• Deep understanding of application security in various contexts.

Responsibilities

• Identify appropriate toolsets for application security strategy.
• Provide guidance for engineering teams on self-service tools.
• Manage and maintain chosen security solutions.
• Provide domain expertise throughout the software development lifecycle.

Skills

Python

Java

JavaScript/TypeScript

C#

Go

Secure code review

DevOps

Application Security

Microservices

Container orchestration

OWASP Top 10

Mitre Top 25

CVSS frameworks

Tools

Application Security Tooling (SCA/SAST/DAST/IaC Security)

Job description

A leading retail company in the UK seeks a Security Engineer for Application Security. You will drive security strategies and support engineering teams with tooling to prevent security issues. The ideal candidate will have expertise in programming languages and application security practices, and experience in a DevOps environment. This role offers attractive annual bonuses and comprehensive benefits including private medical insurance and generous holiday allowance.