Security Engineer in London - Tiro Partners Limited

Security / Python / DevSecOps / Azure / Security Engineer

Role: Senior Application Security Engineer

Remote UK | 1 day per week in London

Salary: Up to £85,000

We’re looking for a Senior Application Security Engineer to join our security team and help embed security across the software development lifecycle.

This is a hands-on role working closely with engineering, cloud and architecture teams to drive a shift-left, DevSecOps approach and build secure applications and platforms.

The role

• Embed security into the SDLC and CI/CD pipelines, including GitHub Actions.
• Implement and operate SAST, DAST, IAST and SCA tooling.
• Secure applications, APIs, Kubernetes and containers.
• Develop security and policy-as-code capabilities using tools such as OPA.
• Help secure cloud and data platforms, including Databricks, Dagster and Snowflake.
• Support threat modelling and ISO 27001 activities.
• Operate and improve application security services and tooling.
• Work directly with developers to identify and remediate vulnerabilities.

About you

You’ll have strong hands-on experience in application security and ideally:

• Terraform and Python skills, with KQL advantageous.
• Experience securing GitHub/GitHub Actions, Kubernetes and APIs.
• Strong knowledge of application security testing and vulnerability management.
• Experience with DevSecOps, threat modelling and security automation.
• Knowledge of ISO 27001.
• Strong cloud security knowledge Azure (Preferred)

If you’re looking for a role where you can make a real impact on application security and work closely with engineering teams, we’d love to hear from you.

Security / Python / DevSecOps / Azure / Security Engineer