API & Platform Engineer - 12 Month Fixed Term Contract
Core
Own and perform risk-prioritised remediation of application code, dependency, and repository security findings across API and platform engineering.
Role type
Application and API security engineer (remediation focus)
Builds
Secure CI/CD pipelines, GitHub workflows, and cloud-native infrastructure
Domain
Financial services / Cybersecurity
Required skills
Node.js, TypeScript, Python, SAST, DAST, SCA, GitHub Actions, CI/CD security, OWASP Top 10, software supply-chain security
Preferred skills
Cloud-native platforms, containers, serverless services, infrastructure as code
Technologies
Node.js, TypeScript, Python, GitHub, GitHub Actions, SAST, DAST, SCA
Responsibilities
Remediate vulnerable open-source and third-party dependencies; Strengthen repository security by addressing exposed secrets and insecure configurations; Improve GitHub and CI/CD security through automated testing and quality gates; Partner with platform and product teams to coordinate remediation actions; Document practical controls, guardrails, and secure engineering patterns; Lead platform and application security risk exemptions by assessing residual risk
Seniority
Mid-level, hands-on IC