51 to 75 of 108 Static Application Security Testing Jobs in England

partnering with a leading UK financial services organisation to hire an Application Security Engineer. You will focus on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle. The role requires experience with OWASP Top 10, Veracode, DevSecOps, and cloud … security across Azure/AWS, plus Kali Linux for manual testing. Hybrid work in London, Manchester or Glasgow with in-office presence ~1 day per week. #J-18808-Ljbffr ...

team of great engineers, delivery managers and architects on several topics i.e., Cloud Platform Design, On‐prem to Cloud Migration, Automated Deployment, Infrastructure Provisioning, Security Testing and many more. You will work on different Platform Engineering, Platform Operations and Platform Security projects and collaborate with Product, Architecture … with WAF, security logging, monitoring and alerting, privileged access management, secrets management and vulnerability management. You’ll also know security scanning tools (SAST, DAST, open‐source and container scanning) and how to apply security controls across data, infrastructure and applications. Resilience and delivery: Experience with business continuity ...

visit us at www.wipro.com. Job Description Sheffield DevSecOps Engineer Role Purpose Embed security controls into the developer workflows that use Claude Code, including SAST integration on AI-generated code, secrets scanning, and secure CI/CD pipeline design. Key Responsibilities Integrate SAST tools (SonarQube, Semgrep, Checkmarx) into CI/…/Experience 5+ years in DevSecOps or application security. Strong CI/CD pipeline experience (GitHub Actions, GitLab CI, Jenkins). Experience with SAST, DAST, and secrets scanning tooling. Application security knowledge: OWASP Top 10, secure coding practices. Scripting: Python, Bash, or similar. Desirable Skills/Experience ...

Brex is seeking a Senior Application Security Engineer to identify and remediate vulnerabilities across the Brex platform. You will perform code reviews, penetration testing, and tooling development … support secure developer workflows. You will collaborate across Security Operations, GRC, Product Security, Front End Platform, and IT Infrastructure, applying threat modeling, SAST/DAST, and agentic AI security to protect a global financial service used by top customers. #J-18808-Ljbffr ...

neurodivergent candidates. We offer reasonable adjustments throughout the hiring process and are dedicated to creating a supportive, accessible environment for everyone. Location and Eligibility Security Engineering Lead Location: Hampshire (onsite 5 days per week) Due to the nature of the work and the customers we support, the successful candidate … security controls, identity management, and threat-mitigation patterns across cloud and hybrid infrastructures. DevSecOps Integration: Oversee the embedding of automated security scanning (SAST, DAST, SCA, container scanning) into delivery pipelines. Risk & Governance: Collaborate with accreditors, Risk Owners, and project leadership to navigate security case approvals and risk ...

underrepresented groups, and neurodivergent candidates. We offer reasonable adjustments throughout the hiring process and are dedicated to creating a supportive, accessible environment for everyone. Security Engineering Lead Location: Hampshire (onsite 5 days per week) Due to the nature of the work and the customers we support, the successful candidate … security controls, identity management, and threat-mitigation patterns across cloud and hybrid infrastructures. DevSecOps Integration: Oversee the embedding of automated security scanning (SAST, DAST, SCA, container scanning) into delivery pipelines. Risk & Governance: Collaborate with accreditors, Risk Owners, and project leadership to navigate security case approvals and risk ...

underrepresented groups, and neurodivergent candidates. We offer reasonable adjustments throughout the hiring process and are dedicated to creating a supportive, accessible environment for everyone. Security Engineer (Scrum) Location: Hampshire (onsite 5 days per week) Due to the nature of the work and the customers we support, the successful candidate … security controls, identity management, and threat-mitigation patterns across cloud and hybrid infrastructures. DevSecOps Integration: Oversee the embedding of automated security scanning (SAST, DAST, SCA, container scanning) into delivery pipelines. Risk & Governance: Collaborate with MOD accreditors, Risk Owners, and project leadership to navigate security case approvals ...

underrepresented groups, and neurodivergent candidates. We offer reasonable adjustments throughout the hiring process and are dedicated to creating a supportive, accessible environment for everyone. Security Engineering Lead Location: Hampshire (onsite 5 days per week) Due to the nature of the work and the customers we support, the successful candidate … security controls, identity management, and threat-mitigation patterns across cloud and hybrid infrastructures. DevSecOps Integration: Oversee the embedding of automated security scanning (SAST, DAST, SCA, container scanning) into delivery pipelines. Risk & Governance: Collaborate with accreditors, Risk Owners, and project leadership to navigate security case approvals and risk ...

underrepresented groups, and neurodivergent candidates. We offer reasonable adjustments throughout the hiring process and are dedicated to creating a supportive, accessible environment for everyone. Security Engineer (Scrum) Location: Hampshire (onsite 5 days per week) Due to the nature of the work and the customers we support, the successful candidate … security controls, identity management, and threat-mitigation patterns across cloud and hybrid infrastructures. DevSecOps Integration: Oversee the embedding of automated security scanning (SAST, DAST, SCA, container scanning) into delivery pipelines. Risk & Governance: Collaborate with MOD accreditors, Risk Owners, and project leadership to navigate security case approvals ...

Security Engineer, AWS, DevSecOps Day rate: £650 per day (Outside IR35) Location: London 1 day week Role: Security Engineer Length: 6 months We're supporting a major transformation programme and are looking for a Security Engineer to help deliver and maintain security controls across multiple technology … DevSecOps or Platform Engineering background. AWS, IAM, Kubernetes and container security experience. Terraform and Infrastructure-as-Code. CI/CD security tooling (SAST, SCA, container and IaC scanning). Python and/or Bash scripting. Vulnerability Management, CVSS and risk assessment experience. Previous experience within a regulated environment. ...

underrepresented groups, and neurodivergent candidates. We offer reasonable adjustments throughout the hiring process and are dedicated to creating a supportive, accessible environment for everyone. Security Engineer (Scrum) Location: Hampshire (onsite 5 days per week) Due to the nature of the work and the customers we support, the successful candidate … security controls, identity management, and threat-mitigation patterns across cloud and hybrid infrastructures. • DevSecOps Integration: Oversee the embedding of automated security scanning (SAST, DAST, SCA, container scanning) into delivery pipelines. • Risk & Governance: Collaborate with MOD accreditors, Risk Owners, and project leadership to navigate security case approvals ...

platform deployment automation and operational controls that underpin entitlement authorization and event driven services The successful candidate will play a critical role in embedding security reliability observability and quality into the software delivery lifecycle enabling engineering teams to build test deploy and operate applications through consistent and automated pathways.Hybrid … container networking and runtime configurationsImplement and enhance platform observability through metrics dashboards alerting structured logging and distributed tracingIntegrate security and quality controls including SAST container scanning dependency scanning code quality analysis and vulnerability managementAutomate secure configuration management secrets handling certificate deployment and compliance evidence generationDesign deployment resilience strategies including ...

auditable pipelines. The Role You’ll provide technical ownership of secure software supply-chain controls across the organisation. You’ll work closely with engineering, security and application teams to embed appropriate security controls into delivery pipelines without creating unnecessary friction. Your responsibilities will include: Administering and supporting … stacks. Managing GitHub Enterprise , including repositories, branching, pull requests, permissions, releases and integration with security/build tooling. Embedding security controls including SAST, software composition analysis, dependency and artefact scanning, secrets detection, SBOM generation and policy-based gates. Managing vulnerabilities from initial discovery and technical triage through ownership ...

industries to create a safer, sustainable and more connected world. Why you should join: Join a team where you'll shape cutting‐edge security architecture across embedded systems, cloud platforms, and mobile applications while driving compliance with leading industry standards. You'll play a key role in strengthening product … TARA activities and maintain risk tracking through the security case and register. Secure Development & DevSecOps Integrate security into CI/CD pipelines (SAST, DAST, SCA, container/IaC scans, SBOM) and define release gates. Maintain security workflows and coach engineers on secure coding and threat‐driven design. ...

## Director, Senior Security ArchitectApply: London: Full time: Posted Today: JR2001275## **About Bullish**## Bullish is an institutionally focused global digital asset platform that provides market infrastructure and information services. These include: **Bullish** **Exchange** – a regulated and institutionally focused digital assets spot and derivatives exchange, integrating a high-performance … frameworks (OWASP Top 10, SANS CWE Top 25).* Solid grasp of enterprise software development, Agile, CI/CD pipelines, and security tooling (SAST, DAST, OSA, Vulnerability Management, API traceability).* Excellent ability to convey complex technical risks to non-technical executives and engineers and build strong cross-functional ...

Security Engineer Office location; UK Wide | Hybrid, London, Manchester, Leeds Main purpose of the role: ITV is currently seeking a skilled Security Engineer to join our Security Engineering team. This role will be embedded with one of our devolved product teams, and will involve promoting and embedding … that our Cyber Security team provides to the business. You will also support the implementation of commercial security tooling, such as SIEM, SAST, and CNAPP. This is a fantastic opportunity to make a real difference to our ‘More than TV’ strategy and play a critical role in securing ...

level DevOps Engineer to help operate and evolve our AWS-based infrastructure. You’ll work at the intersection of infrastructure automation, application delivery, database operations, and security — using Terraform and GitOps workflows to manage cloud resources, GitHub Actions to power CI/CD, and Python to build … observability across infrastructure and applications (metrics, logs, traces, dashboards, and alerting). Apply DevSecOps practices by embedding security checks into the development lifecycle (SAST/DAST, dependency scanning, container/image scanning, IaC scanning) rather than treating security as a separate gate. Contribute to a cloud security ...

managed identity patterns, and network segmentation with Private Link, Azure Firewall and WAF rules. Deliver the DevSecOps tooling in GitHub Actions or Azure Pipelines: SAST, SCA, secrets, container and IaC scanning, with tuned rules, reusable pipeline templates and feedback developers can act on. Implement supply chain controls: SBOM generation, artifact … Cloud, Key Vault, and networking with NSGs, Private Link, Azure Firewall and WAF. DevSecOps tooling in GitHub Actions or Azure Pipelines: integrating and tuning SAST, SCA, secrets, container and IaC scanners, and building reusable pipeline templates. Infrastructure as code with Terraform or Bicep, and PowerShell or Python to automate controls ...

dependencies, build agents, artefact repositories and target environments Migrating applications from legacy deployment tooling onto Octopus Deploy Defining and embedding pipeline security controls - SAST, SCA, dependency scanning, secrets detection and artefact scanning (GitHub CodeQL, Dependabot, JFrog Xray and Curation) Managing software supply-chain controls: approved repositories, open-source governance … working knowledge of Bash/shell scripting Good understanding of Git workflows, artefact repositories, package versioning and environment promotion Experience implementing secure coding controls (SAST, SCA, secrets detection) and a good grasp of secure development principles, including authentication, secrets management, certificates and TLS Windows Server and on-premises hosting knowledge ...

Security Engineer (DevSecOps) Rate - £550 - £650 Inside IR35 Duration - 6 months initial Location - London once a week on site Reports to: Head of Security Architecture and Engineering The role: This is a hands-on engineering role focused on building security into software as developed and deployed. … platform engineering with a strong security focus, or in security engineering. Experience with CI/CD and security scanning tools (SAST, SCA, secrets, IaC and container scanning). Python or Bash and Terraform. AWS fundamentals including IAM, plus working knowledge of containers and Kubernetes. A good grasp ...

Engineering (40%) Design and implement Azure landing zones, management groups, and subscription architecture Build and maintain hub‐spoke network topologies with proper segmentation and security controls Implement Azure Policy, RBAC, and governance frameworks that balance security with developer productivity Manage identity and access using Entra ID, service principals … developer platform Build CI/CD pipelines in Azure DevOps or GitHub Actions with proper security scanning Implement shift‐left security: SAST/DAST, dependency scanning, infrastructure scanning, secrets management Establish infrastructure‐as‐code standards with Terraform (or Bicep), including modules and policy enforcement Create self‐service tooling ...

/CD: Build and maintain GitLab CI pipelines: artifact management, environment promotion, and safe deployment strategies (blue/green, canary, rollback), with policy and security checks baked in. Developer Experience & Automation: Identify toil and remove it with Python, Go, or Bash tooling; improve self-service for product development squads … credentials never end up in code or pipelines. Guardrails in Delivery: Contribute to policy-as-code across Terraform and security scanning (SCA/SAST, container image scanning) in GitLab pipelines, working alongside our Security function. Security Reviews: Consider security during design, raise implications explicitly, and contribute ...

across complex enterprise transformation programmes. This role will play a critical part in shaping cloud architecture, driving DevSecOps adoption, and ensuring technology solutions meet security, reliability, and regulatory requirements within a fast-paced delivery environment. Key Responsibilities Define and govern enterprise-scale Azure cloud and DevOps architecture standards across … Redis or Hazelcast. Expertise in API architecture, RESTful services, OpenAPI/Swagger standards, and integration design patterns. Demonstrated experience implementing DevSecOps controls, including SAST, DAST, secrets management, and compliance automation. Excellent stakeholder management, technical communication, and documentation skills. Bachelor's degree in Computer Science, Engineering, Information Technology, or a related ...

services onto standard pipelines and platform blueprints; DevSecOps & Supply Chain Security: Implement and tune security controls embedded in pipelines, including SAST, DAST, and SCA Container and image scanning, IaC security and policy checks, SBOM generation and verification; Implement secure software supply chain practices, including provenance, artifact signing … orchestration. Strong Infrastructure‐as‐Code skills, particularly Terraform. Working knowledge of cloud networking, identity, and secrets management. Security & Compliance: Hands‐on experience integrating SAST, DAST, and SCA tools (e.g., SonarQube, Black Duck, or similar) into pipelines. Experience with container, cloud, and IaC security scanning. Familiarity with policy ...

Lead Application Security Engineer in the UK. You will shape secure-by-design practices across development teams, guiding tooling like SCA/SAST/DAST, container security and automation to strengthen our cyber posture. You will lead engineers, collaborate with product and compliance, and drive secure practices ...