Security Remediation Developer

Security Remediation Developer

Location: Remote (Occasional travel to their London office)
Contract: Inside IR35
Day rate: Up to £700 per day
Duration: 6 months
Start date: ASAP
Key words: Python (code bases), ideally Terraform, Security, hands-on application, workflow, release and logging remediation

The Security Remediation Engineer will support the delivery of hands-on application, workflow, release and logging remediation within a security assessment remediation programme.
This is a remediation engineering role. Candidates should be comfortable developing in existing codebases, improving delivery workflows, tightening operational controls and documenting implementation evidence.

Assignment Objectives
- Analyse assessment findings and translate assigned remediation items into concrete software changes.
- Implement changes to application workflows, state transitions, access checks, release flows and integration behaviours.
- Support Jira workflow and status changes where application or delivery process alignment is required.
- Create or update release and rollback playbooks with practical engineering input.
- Improve application logging for user activity, security-relevant events, errors and operational diagnostics.
- Integrate with Application Insights, Log Analytics or comparable monitoring and telemetry tooling.
- Support secrets management and secure configuration using Azure Key Vault, managed identities and controlled deployment settings.
- Work with AppSec/DevSecOps engineers to remediate vulnerabilities, dependency issues and secure coding findings.
- Work with QA automation to increase regression coverage and make remediation test evidence repeatable.
- Maintain traceability from Jira tickets to code changes, pull requests, tests, releases and evidence artefacts.