Senior DevSecOps / Application Security Engineer

About the role

Avia Solutions Group is seeking a highly motivated Senior DevSecOps / Application Security Engineer to join its Cyber Security team. In this role you will drive the implementation and continuous improvement of the Secure Software Development Lifecycle (SSDLC) across the organisation.

Key responsibilities

• Design, implement and maintain the Secure Software Development Lifecycle (SSDLC).
• Integrate security controls and automated testing into CI/CD pipelines.
• Deploy, configure and manage application security tooling such as SAST, DAST, SCA, secret‑detection, container security scanning, IaC security scanning, ASPM and CSPM.
• Ensure seamless integration of security tools with development platforms like GitHub, GitLab and Azure DevOps.
• Facilitate and conduct threat‑modeling sessions for applications, systems and new technology initiatives.
• Collaborate with development teams to identify, prioritize and remediate security vulnerabilities.
• Perform application security reviews and provide secure design recommendations.
• Maintain application security standards, secure coding guidelines and supporting processes.
• Analyze security findings, assess risks and support remediation efforts.
• Measure and report on AppSec and SSDLC KPIs and security‑maturity metrics.

Required profile

• 4+ years of experience in Application Security or DevSecOps.
• Hands‑on experience implementing and managing application security solutions.
• Strong understanding of OWASP Top 10, OWASP SAMM, secure coding principles and Secure‑by‑Design concepts.
• Experience with Application Security Posture Management (ASPM) and Cloud Security Posture Management (CSPM).

Required skills

• Static Application Security Testing (SAST)
• Dynamic Application Security Testing (DAST)
• Software Composition Analysis (SCA)
• Secret‑detection scanning
• Container security scanning
• Infrastructure‑as‑Code (IaC) security scanning
• Application Security Posture Management (ASPM)
• Cloud Security Posture Management (CSPM)
• Integration with GitHub, GitLab and Azure DevOps
• Threat modeling