26 to 50 of 68 Static Application Security Testing Jobs in London

000.00 (Based on the experience) Job Open date: 16th October 2026 Close date: 15th November 2026 Job Overview We are seeking a skilled Cyber Security Analyst to support our organisation’s information security, risk management, governance and compliance activities. The successful candidate will be responsible for conducting security … Apply the Secure Software Assurance Maturity Model to assess client compliance requirements for new products and architecture changes. Manage vulnerability assessments using Qualys, conduct SAST using SonarQube and DAST using WebInspect, prioritise remediation and support penetration testing. Support privileged access management using CyberArk, maintain access controls and review audit logs ...

platform (from CI/CD pipelines to multi‐tenant APIs to incident response on authentication flows). Responsibilities Own the secure SDLC: drive SAST, dependency scanning, secrets detection, and PR‐blocking standards across every repository. Harden our AWS and Cloudflare estate: IAM, secrets, network segmentation, KMS, WAF, GuardDuty, and zero … infra: AWS (ECS, RDS, Lambda, KMS, GuardDuty, Security Hub, Inspector), Cloudflare (Workers, WAF, Zero Trust) IaC: AWS CDK, Terraform Security tooling: Aikido (SAST, DAST, container scanning, pen testing), 1Password, GitHub (org‐level enforcement, Advanced Security) Compliance & ops: Drata, Iru, EasyLlama Observability & IR: Datadog, Sentry, Logfire, Incident.io ...

Internet of Things. Reply’s services include Consulting, System Integration, and Digital Services. Role Overview: We are looking for a hands-on Cloud Security Engineer to join our growing cybersecurity practice. This is an engineering-first role so we are looking for someone who builds, configures, and secures cloud … Code (Terraform), including reusable, security-hardened modules and reference patterns Integrate security tooling and automated controls intoCI/CD pipelines, including SAST/DAST tooling, secrets scanning, and policy-as-code enforcement Conduct threat modelling exercises, cloud security posture reviews, and risk assessments for cloud platforms ...

Cleared Cloud Security Engineer Location: UK – Fully Remote Contract: Up to 12 months Clearance: Active UK SC Clearance required Rate: Up to £480/day Outside IR35 We are looking for an experienced SC Cleared Cloud Security Engineer to join a hands-on cloud security engineering team … security guardrails, including Service Control Policies, AWS Config, Security Hub and GuardDuty Integrate security testing into GitHub Actions pipelines, including SAST, dependency scanning, IaC scanning and secrets detection Triage and address security findings identified through CI/CD security tooling Implement secrets ...

innovation and ready to make an impact at scale, we’d love to hear from you. Reporting to the CISO, you'll own the security roadmap for Pigment's product, infrastructure, and CI/CD environment, and you'll build much of it yourself. This is a hands … pipeline. AI-powered security reviews reason about a diff semantically rather than pattern-matching it, which is genuinely different from classic SAST - but it's not a drop-in replacement, and figuring out the split between AI review, traditional SAST and SCA is an open question we'd like ...

vision is simple: to empower every player to reach their full potential, while keeping competition fair, engaging, and thrilling. The Role The Senior Security Engineer leads the evolution of EFG's information security posture by architecting and overseeing the implementation of enterprise security tools, platforms, and frameworks … Development Life Cycle (SSDLC) Leadership: Lead the integration of security-as-code within the CI/CD pipeline. Architect the automated deployment of SAST, DAST, and SCA tooling, and partner with Engineering leads to define security gating criteria. Provide expert-level remediation guidance for complex architectural flaws ...

thousands of restaurant, grocery and convenience partners across the globe. About this role At Just Eat Takeaway.com, we’ve built a world-class security team that believes passionately in protecting our products, as well as the data of our customers and employees. As an application security engineer … technology Detailed knowledge of OWASP Top 10, and in relation how to design appropriate security controls Experience working with Secure Coding Tools (SCA, SAST & Secrets) Experience in identifying & addressing vulnerabilities throughout SDLC, with the ability to switch between defensive & offensive mindset Experience securing AI-enabled applications and assessing common ...

websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent … feature design, triage a complex bug bounty submission, or work directly with engineering teams to resolve vulnerabilities from different sources like bug bounties, SAST, fuzzing and penetration tests. You will also work autonomously to identify areas where our manual processes slow down. You will write code and integrate AI/ ...

would be joining! What you'll be doing Modify, maintain, and extend our security tooling across engineering and IT environments, including CSPM, SAST, SCA, and secret scanning, ensuring it's reliable, well tuned, and genuinely useful to the teams who depend on it. Use our tooling and your … code changes. Cloud Security experience is required. Secured containerised workloads and infrastructure‐as‐code, catching issues before they reach production. Experience working with SAST, SCA, and secret scanning tools, including triaging findings, filtering out false positives, and partnering with engineering teams to get real fixes shipped Supported compliance efforts ...

partnering with a leading UK financial services organisation to hire an Application Security Engineer. You will focus on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle. The role requires experience with OWASP Top 10, Veracode, DevSecOps, and cloud … security across Azure/AWS, plus Kali Linux for manual testing. Hybrid work in London, Manchester or Glasgow with in-office presence ~1 day per week. #J-18808-Ljbffr ...

team of great engineers, delivery managers and architects on several topics i.e., Cloud Platform Design, On‐prem to Cloud Migration, Automated Deployment, Infrastructure Provisioning, Security Testing and many more. You will work on different Platform Engineering, Platform Operations and Platform Security projects and collaborate with Product, Architecture … with WAF, security logging, monitoring and alerting, privileged access management, secrets management and vulnerability management. You’ll also know security scanning tools (SAST, DAST, open‐source and container scanning) and how to apply security controls across data, infrastructure and applications. Resilience and delivery: Experience with business continuity ...

Brex is seeking a Senior Application Security Engineer to identify and remediate vulnerabilities across the Brex platform. You will perform code reviews, penetration testing, and tooling development … support secure developer workflows. You will collaborate across Security Operations, GRC, Product Security, Front End Platform, and IT Infrastructure, applying threat modeling, SAST/DAST, and agentic AI security to protect a global financial service used by top customers. #J-18808-Ljbffr ...

Security Engineer, AWS, DevSecOps Day rate: £650 per day (Outside IR35) Location: London 1 day week Role: Security Engineer Length: 6 months We're supporting a major transformation programme and are looking for a Security Engineer to help deliver and maintain security controls across multiple technology … DevSecOps or Platform Engineering background. AWS, IAM, Kubernetes and container security experience. Terraform and Infrastructure-as-Code. CI/CD security tooling (SAST, SCA, container and IaC scanning). Python and/or Bash scripting. Vulnerability Management, CVSS and risk assessment experience. Previous experience within a regulated environment. ...

platform deployment automation and operational controls that underpin entitlement authorization and event driven services The successful candidate will play a critical role in embedding security reliability observability and quality into the software delivery lifecycle enabling engineering teams to build test deploy and operate applications through consistent and automated pathways.Hybrid … container networking and runtime configurationsImplement and enhance platform observability through metrics dashboards alerting structured logging and distributed tracingIntegrate security and quality controls including SAST container scanning dependency scanning code quality analysis and vulnerability managementAutomate secure configuration management secrets handling certificate deployment and compliance evidence generationDesign deployment resilience strategies including ...

## Director, Senior Security ArchitectApply: London: Full time: Posted Today: JR2001275## **About Bullish**## Bullish is an institutionally focused global digital asset platform that provides market infrastructure and information services. These include: **Bullish** **Exchange** – a regulated and institutionally focused digital assets spot and derivatives exchange, integrating a high-performance … frameworks (OWASP Top 10, SANS CWE Top 25).* Solid grasp of enterprise software development, Agile, CI/CD pipelines, and security tooling (SAST, DAST, OSA, Vulnerability Management, API traceability).* Excellent ability to convey complex technical risks to non-technical executives and engineers and build strong cross-functional ...

Security Engineer Office location; UK Wide | Hybrid, London, Manchester, Leeds Main purpose of the role: ITV is currently seeking a skilled Security Engineer to join our Security Engineering team. This role will be embedded with one of our devolved product teams, and will involve promoting and embedding … that our Cyber Security team provides to the business. You will also support the implementation of commercial security tooling, such as SIEM, SAST, and CNAPP. This is a fantastic opportunity to make a real difference to our ‘More than TV’ strategy and play a critical role in securing ...

level DevOps Engineer to help operate and evolve our AWS-based infrastructure. You’ll work at the intersection of infrastructure automation, application delivery, database operations, and security — using Terraform and GitOps workflows to manage cloud resources, GitHub Actions to power CI/CD, and Python to build … observability across infrastructure and applications (metrics, logs, traces, dashboards, and alerting). Apply DevSecOps practices by embedding security checks into the development lifecycle (SAST/DAST, dependency scanning, container/image scanning, IaC scanning) rather than treating security as a separate gate. Contribute to a cloud security ...

dependencies, build agents, artefact repositories and target environments Migrating applications from legacy deployment tooling onto Octopus Deploy Defining and embedding pipeline security controls - SAST, SCA, dependency scanning, secrets detection and artefact scanning (GitHub CodeQL, Dependabot, JFrog Xray and Curation) Managing software supply-chain controls: approved repositories, open-source governance … working knowledge of Bash/shell scripting Good understanding of Git workflows, artefact repositories, package versioning and environment promotion Experience implementing secure coding controls (SAST, SCA, secrets detection) and a good grasp of secure development principles, including authentication, secrets management, certificates and TLS Windows Server and on-premises hosting knowledge ...

Security Engineer (DevSecOps) Rate - £550 - £650 Inside IR35 Duration - 6 months initial Location - London once a week on site Reports to: Head of Security Architecture and Engineering The role: This is a hands-on engineering role focused on building security into software as developed and deployed. … platform engineering with a strong security focus, or in security engineering. Experience with CI/CD and security scanning tools (SAST, SCA, secrets, IaC and container scanning). Python or Bash and Terraform. AWS fundamentals including IAM, plus working knowledge of containers and Kubernetes. A good grasp ...

Engineering (40%) Design and implement Azure landing zones, management groups, and subscription architecture Build and maintain hub‐spoke network topologies with proper segmentation and security controls Implement Azure Policy, RBAC, and governance frameworks that balance security with developer productivity Manage identity and access using Entra ID, service principals … developer platform Build CI/CD pipelines in Azure DevOps or GitHub Actions with proper security scanning Implement shift‐left security: SAST/DAST, dependency scanning, infrastructure scanning, secrets management Establish infrastructure‐as‐code standards with Terraform (or Bicep), including modules and policy enforcement Create self‐service tooling ...

/CD: Build and maintain GitLab CI pipelines: artifact management, environment promotion, and safe deployment strategies (blue/green, canary, rollback), with policy and security checks baked in. Developer Experience & Automation: Identify toil and remove it with Python, Go, or Bash tooling; improve self-service for product development squads … credentials never end up in code or pipelines. Guardrails in Delivery: Contribute to policy-as-code across Terraform and security scanning (SCA/SAST, container image scanning) in GitLab pipelines, working alongside our Security function. Security Reviews: Consider security during design, raise implications explicitly, and contribute ...

services onto standard pipelines and platform blueprints; DevSecOps & Supply Chain Security: Implement and tune security controls embedded in pipelines, including SAST, DAST, and SCA Container and image scanning, IaC security and policy checks, SBOM generation and verification; Implement secure software supply chain practices, including provenance, artifact signing … orchestration. Strong Infrastructure‐as‐Code skills, particularly Terraform. Working knowledge of cloud networking, identity, and secrets management. Security & Compliance: Hands‐on experience integrating SAST, DAST, and SCA tools (e.g., SonarQube, Black Duck, or similar) into pipelines. Experience with container, cloud, and IaC security scanning. Familiarity with policy ...

Lead Application Security Engineer in the UK. You will shape secure-by-design practices across development teams, guiding tooling like SCA/SAST/DAST, container security and automation to strengthen our cyber posture. You will lead engineers, collaborate with product and compliance, and drive secure practices ...

alert: The DevSecOps architect will enable delivery of: A published, adopted paved-road pipeline with a measurable proportion of the estate migrated onto it. Security controls automated into the pipeline with audit evidence generated automatically. Test automation strategy implementation, with coverage and gate compliance reported per release train. Governed … shift-left testing and service virtualisation to reduce dependency on scarce integrated environments. Security integration: Embed security controls into the pipeline: SAST, DAST, SCA, container and IaC scanning, secrets detection, and SBOM generation. Design the software supply chain security model — artefact provenance, signing, dependency governance, base ...

Nothing, a London-based technology company, is seeking an experienced application security leader to own the security lifecycle for our backend services and cloud platforms. You will define … secure development standards and guide teams to build defensible architectures without slowing delivery. Lead threat modelling across authentication, data protection and public interfaces, implement SAST/DAST/SBOM tooling, and drive encryption and runtime defenses. #J-18808-Ljbffr ...