Senior Application Security Engineer - #2171303
MPower Plus
Date: 2 hours ago
City: Sheffield
Contract type: Contractor
Role: DevSecOps Engineer
Location: Sheffield, UK
Hybrid work: 2- 3 days a week
Contract Inside IR35 on umbrella
Role Purpose
- Embed security controls into the developer workflows that use Claude Code, including SAST integration on AI-generated code, secrets scanning, and secure CI/CD pipeline design.
Key Responsibilities
- Integrate SAST tools (SonarQube, Semgrep, Checkmarx) into CI/CD pipelines to scan AI-generated code.
- Deploy and maintain secrets scanning (Trufflehog, GitGuardian) on Claude Code outputs and repositories.
- Define and enforce secure code review gates for AI-assisted development.
- Provide developer-facing security guidance and embed security champions within engineering teams.
- Instrument Claude Code usage for security telemetry; feed data to SIEM.
- Support incident response for code-related security events.
Required Skills / Experience
- 5+ years in DevSecOps or application security.
- Strong CI/CD pipeline experience (GitHub Actions, GitLab CI, Jenkins).
- Experience with SAST, DAST, and secrets scanning tooling.
- Application security knowledge: OWASP Top 10, secure coding practices.
- Scripting: Python, Bash, or similar.
Desirable Skills / Experience
- Familiarity with AI code generation tools and their security implications.
- Experience with supply chain security (SBOM, SLSA).
- CSSLP or equivalent certification.
How to apply
To apply for this job you need to authorize on our website. If you don't have an account yet, please register.
Post a resumeSimilar jobs
Project Sales Manager (Critical Power)
confidential,
£50,000
-
£100,000
/ year
2 hours ago
Project Sales Manager (Critical Power) If you’ve spent years selling generator projects into someone else’s sales machine, here’s the chance to build your own. The business is an employee-owned standby power specialist established for over 25 years with around 40...
Backend Engineer (Python)
TESTQ Technologies,
2 hours ago
Design, build, test and maintain secure, scalable backend services and APIs, primarily using Python. Deliver production-quality code through sound engineering practices: version control, automated testing, code review, CI/CD, and clear technical documentation. Integrate services with internal platforms, data sources and...
General Manager - Hospitality & Event Operations
WithUS - Events & Hospitality at the University of Sheffield,
18 hours ago
Title: General Manager - Hospitality & Event Operations Reporting to: Head of Hospitality & Hotels OVERVIEW UNICUS is a wholly owned subsidiary of The University of Sheffield, operating a number of distinct commercial services, including cafes, hotels, conference and hospitality...
