1 to 25 of 29 Dynamic Application Security Testing Jobs in England

implement application security controls, including: Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST) Software Composition Analysis (SCA)/dependency scanning Secrets and credentials scanning Work with engineering teams to ensure consistent adoption of DevSecOps practices and secure coding approaches … integrating DevSecOps tooling within CI/CD environments (e.g. GitLab pipelines) Experience with application security testing tools and practices, including: SAST, DAST, SCA/dependency scanning andSecrets/credentials scanning. Experience contributing to security design reviews for applications and APIs Experience supporting or participating in penetration ...

/AR/070467Job Type: Full-time, PermanentSalary: 70,000 - 80,000Location: LondonSector: ITPosted: 2026-07-02An opportunity has arisen for a Senior Application Security Engineer to join a well-established health research organisation and charity that supports large-scale medical research to improve disease prevention, diagnosis … securing APIs, internet-facing services, and Kubernetes (preferably AKS) and containerised environmentsExperience working with engineering teams and implementing security testing tools (SAST, DAST, IAST, SCA)Knowledge of security automation, security-/policy-as-code, and secure engineering practices (code review, testing, source control, documentation)Familiar ...

advisor to engineering and product teams. You'll: Lead application security reviews for high-risk products and services. Conduct and oversee SAST, DAST, API security, fuzz testing and architecture-level assessments . Assess applications against the OWASP Top 10 and other relevant security standards. Identify … technologies including Java, C, C++ and other relevant languages. Integrate security controls and automated testing into CI/CD pipelines , including SAST, DAST and SCA. Support threat modelling and vulnerability management across products and services. Work closely with developers, architects, DevOps teams and product owners to embed security ...

placeAssess the security posture of our applications and APIs through code reviews and static and dynamic security testing (SAST/DAST), and manage third-party penetration tests, from scoping with engineering teams and architects through to tracking remediationStrengthen the security of our iOS and Android … secure approaches to authentication and authorisation, such as OAuth 2.0 and OpenID ConnectHands-on experience with security testing tools such as SAST, DAST and vulnerability scanning solutions, ideally including mobile app security testing and API security testing toolsPractical experience with threat modelling and security ...

Security Engineer - Software Security Enablement Location London Business Area Legal, Compliance, and Risk Ref # 10050535 Description & Requirements Our Team: Bloomberg is building the world's most trusted information network for financial professionals. We protect Bloomberg. We partner with internal departments to ensure the confidentiality, integrity, and availability … results. As a member of the Security Enablement team, you will help provide automated security testing solutions for Bloomberg, including SAST, DAST, SCA, Secret searching and LLM-based assessments. Our team's goal is to create preventative security capabilities that integrate into development pipelines and help ...

Reference: 58029Application Security Engineer (Cyber) - Financial Services Contract - Inside I35 London - Hybrid Who we're looking forOur clients Cyber Security team is looking for a Cybersecurity engineer with expertise in Application Security domain, who will be responsible to define consistent Secure Software Development Lifecycle practices … triage the findings and explaining how to mitigate the risksTo articulate business risk when assessing software vulnerabilities Continuously improve the operations of SAST, DAST and IaC security toolsContinuously improve the operations of Web Application Firewalls (WAF) or IDSContinuously improve the coverage of security tooling in Cloud environments ...

diverse, ambitious team that celebrates creativity and collaboration. Ready to make your mark? Join us and be part of something bigger. As a Senior Security Engineer, you will work in close collaboration with our technology teams to design and implement secure, cloud-based software solutions for our clients. Working … lifecycle, embedding security practices (e.g. vulnerability management, threat modelling etc.) and automating security artifact generation (e.g. secret scanning, container security, SAST, DAST etc.). You will provide subject matter expertise in application security or cloud security – sharing knowledge on threats and vulnerabilities, identifying appropriate ...

/CD pipelines across build, test, and release stages, designing risk-based security gates and integrating comprehensive security testing (SAST, DAST, SCA, container scanning) to enable secure-by-default development Build and maintain internal DevSecOps tooling and platform extensions that scale across enterprise engineering teams, including reusable … application security concepts including OWASP Top 10, secure coding practices, and experience with security testing tools such as SAST, DAST, and SCA platforms Bachelor's degree in Computer Science, Engineering, Cybersecurity or equivalent practical experience in DevSecOps or security engineering roles Proven ability to build ...

security. Carry out ongoing manual security assessments, coordinate third-party engagements where needed, and turn findings into clear, prioritised actions. Review SAST, DAST and SCA outputs, driving remediation through to closure and keeping tracking, ownership and prioritisation firmly on course. Provide on-demand application security support … Actions, with the confidence to bring security into delivery without slowing everyone down. Practical experience with security tooling and practices including SAST, DAST, SCA, container scanning, vulnerability management, SBOM tooling such as CycloneDX, IaC security across Terraform, Bicep, Ansible and tools such as Trivy, plus Policy ...

offices so that we're able to interact and collaborate in person. About Engineering at Engine by Starling —As a Security Engineer at Engine, you'll be working on helping to keep our infrastructure secure and compliant and our staff safe and productive. You'll be working on projects … performing secure code reviews and security approvals, including the use of static and dynamic application security testing (SAST/DAST) toolsExperience in cryptography management and enhancementsRelevant security certifications such as ISC2 CC, CISSP, CCSP, CISM, AWS Security Specialty or GCP Professional Cloud Security ...

introducing security gates and guardrails and ensuring applications are secure even post deploymentRun and continuously improve secure code review practices, including SAST/DAST/SCA tooling integrated into CI/CD pipelines and code review (manual and/or AI assisted)Coordinate external and execute internal penetration test … security in the SDLC: threat modelling frameworks (e.g. STRIDE), secure design review, and working directly with engineering teamsHands-on experience with SAST/DAST/SCA tooling and CI/CD pipeline integrationStrong grasp of OWASP Top 10 and secure coding practices across at least one major language/ ...

mission to build a tech-forward, secure environment that empowers developers rather than putting roadblocks in their way. As an Application Security Engineer, you'll act as a core technical guide across our software development lifecycle—helping us embed security directly into our code and architecture while … technical mentor. Integrate security assessments, code reviews, and penetration testing seamlessly into the SDLC.Evaluate, implement, and run modern security tooling (SAST, DAST, IAST) to streamline vulnerability checks. Research emerging AI and LLM threat classes to design proactive, cutting-edge defensive architectures. Participate in incident response investigations ...

display and foster them, it's deeply embedded within our DNA. Invest in us and we'll invest in you!. Job DescriptionAs a Security Architect, you'll partner with government, financial services, and private sector clients to design security solutions that address their most complex digital risks. …/or Azure, including network segmentation, IAM, encryption, secrets management, and security monitoring. You understand AppSec practices including secure SDLC, SAST/DAST tooling, API security, and container security in agile delivery contexts. Experience directly working with clients and senior stakeholders to assess risk, facilitate threat modelling ...

display and foster them, it's deeply embedded within our DNA. Invest in us and we'll invest in you!. Job DescriptionAs a Security Architect, you'll partner with government, financial services, and private sector clients to design security solutions that address their most complex digital risks. …/or Azure, including network segmentation, IAM, encryption, secrets management, and security monitoring. You understand AppSec practices including secure SDLC, SAST/DAST tooling, API security, and container security in agile delivery contexts. Experience directly working with clients and senior stakeholders to assess risk, facilitate threat modelling ...

display and foster them, it's deeply embedded within our DNA. Invest in us and we'll invest in you!. Job DescriptionAs a Security Architect, you'll partner with government, financial services, and private sector clients to design security solutions that address their most complex digital risks. …/or Azure, including network segmentation, IAM, encryption, secrets management, and security monitoring. You understand AppSec practices including secure SDLC, SAST/DAST tooling, API security, and container security in agile delivery contexts. Experience directly working with clients and senior stakeholders to assess risk, facilitate threat modelling ...

reference: SS/44949Sector: BankingRegion: London, North West, South East, ScotlandSpecialisms: Information Security JobsClosing date: 2026-11-19We're working with a leading UK financial services organisation looking for an experienced Application Security Engineer to join its security function. You'll work closely with engineering and DevSecOps teams, focusing on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle. You will also do some pre-release manual PenTesting and threat modelling work. ...

join our team in the role of Head of AppSec. The Opportunity We are seeking a modern, visionary, pragmatic, and collaborative Head of Application Security to transform our global AppSec function. Operating across multiple geographies, your mandate is to secure a vast, hybrid technology estateranging from core … environments without stifling business innovation. Unified Tooling & Automation: Drive the strategy and implementation of modern Application Security Testing (AST) capabilitiesincluding SAST, DAST, SCA, IAST, and Secrets Managementwith high signal-to-noise ratios. Engineering Leadership: Truly bring an engineering mindset to problem solving and is not afraid ...

security best practices across IAM, networking and workloads. Work with services such as GuardDuty, CloudWatch and IAM Identity Center . Integrate SAST and DAST practices into development and deployment pipelines. Maintain secure software supply chains, including AMI and container image scanning. Implement and monitor infrastructure and application security … Docker Compose . Excellent Linux systems administration skills. Strong CI/CD experience with GitHub Actions and Argo CD . Experience implementing SAST and DAST within software delivery pipelines. Strong scripting and automation skills using Bash, Python and/or Go . Experience delivering secure, highly available and cost-efficient ...

automated security controls across CI/CD pipelines, infrastructure provisioning, application delivery, container images, Kubernetes, and cloud services. Integrate and operationalize SAST, DAST, SCA, container scanning, secrets scanning, and policy-as-code. Define secure engineering standards and reusable guardrails that let teams move quickly within approved boundaries. Apply … Deep secure-SDLC knowledge: secure design and coding, threat modeling, automated testing, vulnerability and dependency management, release controls, and production readiness. Integrating SAST, DAST, and SCA into CI/CD in a practical, automated, developer-usable way. Container security: image scanning, base-image strategy, registry controls, remediation, runtime ...

automated security controls across CI/CD pipelines, infrastructure provisioning, application delivery, container images, Kubernetes, and cloud services. Integrate and operationalize SAST, DAST, SCA, container scanning, secrets scanning, and policy-as-code. Define secure engineering standards and reusable guardrails that let teams move quickly within approved boundaries. Apply … Deep secure-SDLC knowledge: secure design and coding, threat modeling, automated testing, vulnerability and dependency management, release controls, and production readiness. Integrating SAST, DAST, and SCA into CI/CD in a practical, automated, developer-usable way. Container security: image scanning, base-image strategy, registry controls, remediation, runtime ...

Senior DevSecOps Architect, you'll collaborate with top cybersecurity and engineering talent, solving complex challenges and enabling safe, secure innovation. Your passion for security and drive to make a real impact are valued here. Grow your skills in a dynamic environment designed for achievers. Help us build products … manifestsHands-on experience in integrating a comprehensive DevSecOps tooling stack, including SAST, SCA, RASP, IAST, container and image scanning, secrets detection, and AI-powered DAST solutionsExperience implementing and managing SBOMs to track internal, third-party risk and supply chain security. Ability to solve design and functionality problems independently. Strong written ...

industries to create a safer, sustainable and more connected world. Why you should join: Join a team where you'll shape cutting‐edge security architecture across embedded systems, cloud platforms, and mobile applications while driving compliance with leading industry standards. You'll play a key role in strengthening product … activities and maintain risk tracking through the security case and register. Secure Development & DevSecOps Integrate security into CI/CD pipelines (SAST, DAST, SCA, container/IaC scans, SBOM) and define release gates. Maintain security workflows and coach engineers on secure coding and threat‐driven design. Validation ...

Senior DevSecOps Architect, you ll collaborate with top cybersecurity and engineering talent, solving complex challenges and enabling safe, secure innovation. Your passion for security and drive to make a real impact are valued here. Grow your skills in a dynamic environment designed for achievers. Help us build products … Hands-on experience in integrating a comprehensive DevSecOps tooling stack, including SAST, SCA, RASP, IAST, container and image scanning, secrets detection, and AI-powered DAST solutions Experience implementing and managing SBOMs to track internal, third-party risk and supply chain security. Ability to solve design and functionality problems independently. Strong ...

Senior DevSecOps Architect, youll collaborate with top cybersecurity and engineering talent, solving complex challenges and enabling safe, secure innovation. Your passion for security and drive to make a real impact are valued here. Grow your skills in a dynamic environment designed for achievers. Help us build products that … Hands-on experience in integrating a comprehensive DevSecOps tooling stack, including SAST, SCA, RASP, IAST, container and image scanning, secrets detection, and AI-powered DAST solutions Experience implementing and managing SBOMs to track internal, third-party risk and supply chain security. Ability to solve design and functionality problems independently. Strong ...

Senior DevSecOps Architect, you'll collaborate with top cybersecurity and engineering talent, solving complex challenges and enabling safe, secure innovation. Your passion for security and drive to make a real impact are valued here. Grow your skills in a dynamic environment designed for achievers. Help us build products … Hands-on experience in integrating a comprehensive DevSecOps tooling stack, including SAST, SCA, RASP, IAST, container and image scanning, secrets detection, and AI-powered DAST solutions Experience implementing and managing SBOMs to track internal, third-party risk and supply chain security. Ability to solve design and functionality problems independently. Strong ...