9 of 9 CodeQL Jobs in the UK

applications from legacy deployment tooling onto Octopus Deploy Defining and embedding pipeline security controls - SAST, SCA, dependency scanning, secrets detection and artefact scanning (GitHub CodeQL, Dependabot, JFrog Xray and Curation) Managing software supply-chain controls: approved repositories, open-source governance, package lifecycle, traceability and SBOM Integrating deployment automation with ...

ability to investigate and resolve complex technical issues across the software delivery lifecycle. Experience with JFrog Advanced Security/Curation, GitHub Advanced Security, CodeQL, Dependabot, Terraform, Docker, Kubernetes, SBOMs, software signing/attestation or cloud-native platforms would be highly advantageous. Knowledge of Java, .NET, JavaScript/TypeScript, Python ...

Ability to communicate technical decisions clearly, collaborate effectively and learn new technologies. Desirable criteria React Next.js TypeScript Terraform Sitecore XM Cloud Vercel Storybook GraphQL CodeQL SonarQube SEO and performance optimisation Experience working with enterprise‐scale digital platforms We are proud to be a Disability Confident Committed employer. ...

Ability to communicate technical decisions clearly, collaborate effectively and learn new technologies. **Desirable criteria**: React, Next.js, TypeScript, Terraform, Sitecore XM Cloud, Vercel, Storybook, GraphQL, CodeQL, SonarQube, SEO and performance optimisation, and experience working with enterprise-scale digital platforms. We are proud to be a Disability Confident Committed employer. ...

software development lifecycle. Experience with security assurance, control frameworks, architecture or capability mapping. Knowledge of application security tooling such as GitHub Advanced Security, CodeQL, Dependabot, Fortify, Qualys or Checkov beneficial. Strong stakeholder management with the ability to challenge technical and engineering teams. Knowledge of vulnerability management, exception governance ...

strategies. Experience with GitHub Advanced Security (GHAS), including Code Scanning (SAST), Secret Scanning, and Dependency Review. Proficiency in SAST, DAST, and SCA tools (e.g., CodeQL, Burp Suite, OWASP ZAP, Snyk, Checkmarx, Veracode).Hands-on experience integrating security testing tools into CI/CD pipelines for automated security scanning, including ...

love to see (not required, but nice to have!): Experience or familiarity with running, maintaining, and customizing static analysis security testing tools such as CodeQL and Semgrep. Broad familiarity with programming language ecosystems and frameworks, particularly C++, JavaScript/TypeScript, Python, Java as well as well as modern systems ...

with a collaborative mindset. Desirable criteria: Terraform and Infrastructure as Code, Sitecore XM Cloud, Vercel, Playwright, Storybook, GraphQL, Marketing Cloud, Aprimo, Seismic, Sitecore Search, CodeQL, SonarQube and experience of enterprise-scale digital platforms. We are proud to be a Disability Confident Committed employer. If you have a disability ...

with a collaborative mindset. **Desirable criteria**: Terraform and Infrastructure as Code, Sitecore XM Cloud, Vercel, Playwright, Storybook, GraphQL, Marketing Cloud, Aprimo, Seismic, Sitecore Search, CodeQL, SonarQube and experience of enterprise-scale digital platforms. We are proud to be a Disability Confident Committed employer. If you have a disability ...

with a collaborative mindset. Desirable criteria Terraform and Infrastructure as Code Sitecore XM Cloud Vercel Playwright Storybook GraphQL Marketing Cloud Aprimo Seismic Sitecore Search CodeQL SonarQube experience of enterprise-scale digital platforms. We are proud to be a Disability Confident Committed employer If you have a disability and would ...