across engineering and product teams Requirements: 3+ years experience in DevOps, security engineering, or cloud infrastructure Strong scripting skills (Python, Bash, or PowerShell) Familiarity with tools like Snyk, SonarQube, OWASP ZAP, or Aqua Experience with Kubernetes, Docker, and infrastructure-as-code (Terraform, Helm) Understanding of security frameworks (ISO 27001, NIST, CIS Benchmarks) Bonus Points Certifications: AWS Security Specialty, CISSP, or More ❯
and Azure DevOps (CI/CD) Familiarity with scripting languages like PowerShell, YAML, JSON Hands-on with applicationsecurity tools and DevSecOps processes Understanding of frameworks and standards like OWASP, NIST SSDF, ISO27001, NCSC Experience with threat modelling, risk assessments, and secure design reviews Confident owning security strategy and tooling across complex product landscapes A strong communicator - able to engage More ❯
London, South East, England, United Kingdom Hybrid / WFH Options
Akkodis
and Azure DevOps (CI/CD) Familiarity with scripting languages like PowerShell, YAML, JSON Hands-on with applicationsecurity tools and DevSecOps processes Understanding of frameworks and standards like OWASP, NIST SSDF, ISO27001, NCSC Experience with threat modelling, risk assessments, and secure design reviews Confident owning security strategy and tooling across complex product landscapes A strong communicator - able to engage More ❯
through deployment, oversee secure coding and testing, and drive operational maturity and resilience against evolving threats What you'll do: Define and govern secure architecture standards, aligned with NIST, OWASP, ISO 27001, and enterprise policies Lead DevSecOps integration, embedding automated security testing (SAST, DAST, SCA, container security) into CI/CD pipelines Oversee large-scale secure development programs, ensuring SLA More ❯
/CD tools such as Jenkins, AWS CodePipeline, GitLab CI, or GitHub Actions Solid understanding of relational and NoSQL databases (e.g., PostgreSQL, MongoDB) Knowledge of security best practices (e.g. OWASP) and performance optimization Excellent leadership, communication, time management and mentoring skills, with the ability to influence technical direction Desirable Qualifications Experience in fintech, payments, or enterprise SaaS platforms Exposure to More ❯
Provide mentoring, training, and security awareness support to internal teams. Essential Skills & Experience Strong hands-on experience in application and cloud security engineering. Deep understanding of web app vulnerabilities (OWASP Top 10, CWE) and secure coding practices. Proficiency with security testing tools and vulnerability management platforms. Broad knowledge of network and infrastructure security concepts (WAFs, ACLs, VPNs, etc.). Familiarity More ❯
Provide mentoring, training, and security awareness support to internal teams. Essential Skills & Experience Strong hands-on experience in application and cloud security engineering. Deep understanding of web app vulnerabilities (OWASP Top 10, CWE) and secure coding practices. Proficiency with security testing tools and vulnerability management platforms. Broad knowledge of network and infrastructure security concepts (WAFs, ACLs, VPNs, etc.). Familiarity More ❯
embedding security in agile development environments Hands-on knowledge of cloud platforms , CI/CD pipelines , and scripting (PowerShell, YAML, JSON, etc.) Familiarity with frameworks and standards such as OWASP , NIST SSDF , ISO27001 , or NCSC Practical experience with threat modelling , security tooling , and risk assessments Excellent communication skills, able to influence and engage at all levels from developers to execs More ❯
London, South East, England, United Kingdom Hybrid / WFH Options
Akkodis
embedding security in agile development environments Hands-on knowledge of cloud platforms , CI/CD pipelines , and scripting (PowerShell, YAML, JSON, etc.) Familiarity with frameworks and standards such as OWASP , NIST SSDF , ISO27001 , or NCSC Practical experience with threat modelling , security tooling , and risk assessments Excellent communication skills, able to influence and engage at all levels from developers to execs More ❯
command-line interfaces or scripting tools in cloud environments is a plus Cloud Security skills (desired): Secure software development practices, including SecDevOps Sound knowledge of applicable frameworks & standards, including OWASP, MITRE ATT@CK & D3FEND, CIS, NIST CSF, CSA CCM & ISO 27107 Relevant industry certifications including CSCP Understanding of cyber risk frameworks or industry standards such as 800-53, ISO More ❯
Python, along with experience in modern frontend frameworks like React.js or Stencil. Deep understanding of authorization and authentication standards (OAuth) and secure-by-design development practices. Strong awareness of OWASP Top 10 and a proactive approach to identifying and mitigating security vulnerabilities during development. Experience designing and deploying Retrieval-Augmented Generation (RAG) pipelines, working with LLM APIs (AWS Bedrock, OpenAI More ❯
using technologies such as AWS Lambda, Spring Boot, NodeJS, Python FastAPI, Oracle, PostgreSQL, and MongoDB . Work within Agile and DevSecOps environments, utilising tooling such as Atlassian, Jenkins, GitLab, OWASP and AWS services. Apply Site Reliability Engineering principles to enhance reliability, resilience, and performance. Support technical decision-making, explaining trade-offs and best practices to clients and stakeholders. Contribute to More ❯
roles Strong software engineering skills (Python, Go or TypeScript) Experience securing web, mobile and API architectures at scale Deep knowledge of SAST, DAST, IAST, SCA workflows & automation Familiarity with OWASP Top 10, ASVS, MASVS & modern secure design Understanding of OAuth2, OIDC, WebAuthn and identity auth patterns 🎯 Bonus Points For Security engineering experience in FinTech, payments or regulated domains Delivered secure More ❯
roles Strong software engineering skills (Python, Go or TypeScript) Experience securing web, mobile and API architectures at scale Deep knowledge of SAST, DAST, IAST, SCA workflows & automation Familiarity with OWASP Top 10, ASVS, MASVS & modern secure design Understanding of OAuth2, OIDC, WebAuthn and identity auth patterns 🎯 Bonus Points For Security engineering experience in FinTech, payments or regulated domains Delivered secure More ❯
autonomously. Demonstrable expertise and understanding of API development/design and experience interfacing with disparate systems. Applicable understanding of software security, common exploits and secure development practices, including the OWASP Top 10. Proven and demonstrable understanding of testing methodologies and frameworks. Commercial experience with AWS and IaC (Terraform/CDK/CloudFormation) Commercial experience with Linux, Docker, Docker Compose, Git More ❯
internal and external audits where needed. What we're looking for Experience in software engineering, with a strong security mindset Deep understanding of web and API vulnerabilities, including the OWASP Top 10 Proficient in coding, scripting (e.g. Python, Bash), and automating security in CI/CD Hands-on experience with security tools like SAST, DAST, and SCA Familiar with cloud More ❯
Kubernetes, or containerised environments PostgreSQL or other SQL databases Embedded or resource-constrained systems Machine learning or autonomy applications Mapping or visualisation frameworks (Cesium, Mapbox, Leaflet) Secure coding and OWASP-style best practices Benefits Mission & Impact: Build software directly supporting defence and humanitarian operations Ownership: Shape architecture, product direction, and team culture from day one Peers: Collaborate with experts in More ❯
CMS , and RESTful API integrations Experience with version control (Git, Bitbucket) and CI/CD pipelines Knowledge of SEO , accessibility standards , and responsive design Understanding of secure development practices (OWASP) Familiarity with cloud platforms such as AWS or Azure Interview Process: 2 stages How to apply: Please click the link below or email me directly on mohima.ali@lafosse.com More ❯
CMS , and RESTful API integrations Experience with version control (Git, Bitbucket) and CI/CD pipelines Knowledge of SEO , accessibility standards , and responsive design Understanding of secure development practices (OWASP) Familiarity with cloud platforms such as AWS or Azure Interview Process: 2 stages How to apply: Please click the link below or email me directly on mohima.ali@lafosse.com More ❯
consulting, applications, cloud, and infrastructure, you'll collaborate with brilliant colleagues and clients on truly impactful projects. What you'll do: Embed security across the SDLC, promoting secure coding (OWASP) Automate security in CI/CD workflows (SAST, DAST, IAST, SCA, IaC) Perform appsec testing, code reviews, and vulnerability remediation Drive secure DevOps culture through training, playbooks, and developer champions … Strengthen cloud & container security (AWS, Azure, GCP, Kubernetes, Docker) What you'll bring: 2-4 years' experience in AppSec/DevSecOps Hands-on with tools like Checkmarx, Veracode, SonarQube, OWASP ZAP Strong coding skills (Java, Python, JavaScript, Go, .NET) Familiar with CI/CD (Jenkins, GitHub Actions, Azure DevOps) and IaC (Terraform) Knowledge of OWASP Top 10, API security, and More ❯
experience securing enterprise applications and infrastructure, preferably in the Crypto and FinTech space. Experience with the application of threat modeling and other risk identification techniques. Strong understanding of the OWASP top 10, including details of common vulnerabilities and emerging threats. Experience with authentication and authorization standards, including OAuth and SAML, and their weaknesses. Detailed knowledge of system security vulnerabilities and More ❯
