51 to 68 of 68 Static Application Security Testing Jobs in London

comfortable engaging with clients, understanding their needs, and translating them into effective outcomes. The Role: We are seeking a highly skilled and motivated Security Cleared DevOps Engineer to join our team. The successful candidate will be responsible for designing, implementing, and maintaining secure, scalable, and automated infrastructure solutions across … Cloud Build, Artifact Registry and Cloud Deploy. Knowledge of GitOps practices and tools such as Argo CD or Flux. Experience implementing DevSecOps tooling, including SAST, DAST, container image scanning and dependency scanning. Familiarity with policy-as-code, automated compliance and security controls. Experience working in regulated, government, defence ...

youre comfortable engaging with clients, understanding their needs, and translating them into effective outcomes. The Role: We are seeking a highly skilled and motivated Security Cleared DevOps Engineer to join our team. The successful candidate will be responsible for designing, implementing, and maintaining secure, scalable, and automated infrastructure solutions … Cloud Build, Artifact Registry and Cloud Deploy. Knowledge of GitOps practices and tools such as Argo CD or Flux. Experience implementing DevSecOps tooling, including SAST, DAST, container image scanning and dependency scanning. Familiarity with policy-as-code, automated compliance and security controls. Experience working in regulated, government, defence ...

directly into release decisions. Drive shift-left testing, service virtualisation and greater automation across complex engineering environments. Embed automated security controls including SAST, DAST, SCA, container/IaC scanning, secrets detection and SBOM generation into delivery pipelines. Establish policy-as-code, software supply chain security and automated … such as Selenium, Playwright, Cypress, JUnit/pytest, Pact, JMeter or k6. Deep practical experience integrating security controls into CI/CD, including SAST/DAST/SCA, secrets management and software supply chain security. Strong experience across Azure DevOps, GitHub Actions, GitLab and/or Jenkins, alongside Kubernetes ...

identifying bottlenecks in the secure software development lifecycle and building automated solutions to resolve them. Architecting and evolving standardized deployment patterns that bake in security, compliance, and observability, allowing product teams to focus on delivering customer functionality. Ensuring high availability, performance, and seamless integration of our self-hosted engineering … modern deployment methodologies (such as GitOps) to ensure declarative, reproducible, and audited state management across all environments. Owning automated security tooling (e.g. SAST, DAST, dependency scanning, container scanning, and secrets detection) to deliver security audit evidence for the platform Arondite aims to bring together individuals from diverse backgrounds ...

properly: IAM, service accounts, logging and org policy. AWS and Azure familiarity helps You can read code well enough to judge whether a SAST finding is real You’re genuinely fluent with AI tooling and you build with it rather than around it You write clearly, because most of what … properly: IAM, service accounts, logging and org policy. AWS and Azure familiarity helps You can read code well enough to judge whether a SAST finding is real You’re genuinely fluent with AI tooling and you build with it rather than around it You write clearly, because most of what ...

starting with the most painful parts: procurement – where a single purchase can drag on for months, trigger 50+ emails , and pull in Finance, Legal, Security, and IT just to get something approved. We’ve raised $75M from Khosla Ventures, Insight Partners, and Accel to change that. Our AI-native … Security Roadmap, leading implementations and experiments to level up Omnea’s security posture. Own Security Tooling. From safe-chain plugins to SAST/DAST tooling, we want someone who’s keen to get stuck in, onboard, and evolve our tooling to ensure our posture stays ...

Config as Code: Terraform, Ansible, Bicep/ARM, Helm, Kustomize; GitOps via Argo CD and Flux Cloud & Orchestration: AWS, Azure, Docker, Kubernetes AI Inference & Application Infrastructure: Frontier and open-weight models via Anthropic, Azure OpenAI, and Amazon Bedrock; model gateways and routing, retrieval and hybrid search, document ingestion, tool … Elastic/ELK, OpenTelemetry, including GenAI tracing and token, latency, and cost telemetry Platform Security & Policy-as-Code: HashiCorp Vault, OPA/Conftest, SAST/DAST Developer Portal & Self-Service: Internal developer portal, CLIs/SDKs, and APIs Responsibilities include: Developer Experience & Self-Service Enablement Build and maintain self ...

building and publishing reusable packages, templates, or internal libraries — with proper versioning, documentation, and consumption patterns Strong understanding of security-first engineering: encoding SAST/DAST integration, secret management, and policy-as-code into central platform assets Ability to work autonomously on complex technical problems while collaborating closely with … skills, subagents, and MCP servers that become the standard AI tooling distributed to all client teams Implement golden path templates — project scaffolding, pipeline configuration, security guardrails, AI-native workflow defaults, etc. Maintain and evolve how platform assets reach engineering teams: versioning, distribution across the appropriate channels (version-controlled component ...

have raised $60M in Series C funding from Wellington Management, CRV, Next47 and Y Combinator. About the role We're looking for a Lead Security Engineer to own and mature how Encord secures its people, identities, devices, and the SaaS and AI tools we run the business on. … remediation tracking, and SLAs. Experience building and improving detection and monitoring, centralising logs into a SIEM and defining meaningful alerts. Experience implementing and tuning SAST, DAST, SCA, and secrets scanning in CI/CD pipelines. Experience coordinating external penetration tests and bug reports, and driving fixes to closure with engineering ...

building and publishing reusable packages, templates, or internal libraries - with proper versioning, documentation, and consumption patterns Strong understanding of security-first engineering: encoding SAST/DAST integration, secret management, and policy-as-code into central platform assets Ability to work autonomously on complex technical problems while collaborating closely with … skills, subagents, and MCP servers that become the standard AI tooling distributed to all client teams Implement golden path templates - project scaffolding, pipeline configuration, security guardrails, AI-native workflow defaults, etc. Maintain and evolve how platform assets reach engineering teams: versioning, distribution across the appropriate channels (version-controlled component ...

functional requirements. Operating at a strategic level, you’ll mentor engineers, build strong relationships with senior stakeholders, and influence the adoption of forward-thinking testing practices (such as AI-assisted testing) across our entire QA practice. Key aspects of the role include: Squad Leadership & Strategy: Partnering with cross … policy validation, rate limiting, and OAuth 2.0/Entra ID JWT authentication). Experience embedding DevSecOps and security quality gates (such as SonarQube SAST, DAST, or container scanning) within CI/CD pipelines. Exposure to service virtualisation (e.g., WireMock or policy stubs) and synthetic test data management to ensure ...

Orchestration). CI/CD & DevSecOps: GitLab CI/CD pipelines, on-premises GitLab server, GitLab Runner fleet, and shift-left security (SCA, SAST, DAST). Containers & GitOps: Docker-Compose on EC2, EKS, and ArgoCD. Artifact Management: Support for self-managed JFrog Artifactory & Xray. Scripting: Developing automation scripts, Docker ...

Orchestration). CI/CD & DevSecOps: GitLab CI/CD pipelines, on-premises GitLab server, GitLab Runner fleet, and shift-left security (SCA, SAST, DAST). Containers & GitOps: Docker-Compose on EC2, EKS, and ArgoCD. Artifact Management: Support for self-managed JFrog Artifactory & Xray. Scripting: Developing automation scripts, Docker ...

service meshes. Contribute to the Kong AI Gateway, including Dataplane deployments, ACM/SSL integration, and observability via DataDog Champion DevSecOps maturity by embedding SAST/DAST, chaos engineering, and error budget monitoring. Collaborate with Security, Data, and AI teams to shape DevOps and AI platform architectures with regulatory … OpenTelemetry. Strengthening platform security through Vault‐based secret management, least privilege access, and compliance automation. Designing CI/CD workflows that include SAST, DAST, policy enforcement, and performance telemetry. Improving reliability and resilience through SLOs, error budgets, and chaos engineering. Working knowledge of LLM‐based services and AI infrastructure. ...

Location: London, UK### Work Mode: Remote### Experience: 10-15 Years### Job Description:We are hiring a hands-on technical leader to own the architecture, security posture and delivery quality of our business-critical ERP applications. You will write and review production code, set architectural direction. You will also work … vulnerabilities, SQL Injection, DDOS, XSS* Partner with infrastructure/DevOps on CI/CD (Jenkins, GitHub Actions), containerization and AWS hosting.* Implement and operationalize SAST and DAST in CI/CD pipelines, and triage and close findings.* Conduct vulnerability assessments and remediate issues in live production systems.* Run security ...

seeking a skilled Security Engineer to join our Security Engineering team. You will be embedded with a devolved product team, promoting secure SDLC practices across the development lifecycle and helping build and operate bespoke security services for ITV. In this … hybrid UK-wide role, you will advise engineers, implement cloud-native security controls, and support the rollout of commercial tooling such as SIEM, SAST and CNAPP across ITV. #J-18808-Ljbffr ...

discovery and analytical solutions across multiple asset classes. Working alongside Senior and Principal Engineers, you will take part in the analysis, design, development and testing of new features and changes, and see them through to production. You will also work directly with end users, including the quant team … Perl or Ruby) Windows PowerShell or Linux shell experience Exposure to other languages such as C#, Java or Python Awareness of secure coding practices (SAST) Role Band & Level Professional/5 #LI-Hybrid #LI-ASO Company Statement We know that the best innovation happens when diverse people with different perspectives ...

discovery and analytical solutions across multiple asset classes. Working alongside Senior and Principal Engineers, you will take part in the analysis, design, development and testing of new features and changes, and see them through to production. You will also work directly with end users, including the quant team … Perl or Ruby)* Windows PowerShell or Linux shell experience* Exposure to other languages such as C#, Java or Python* Awareness of secure coding practices (SAST) **Role Band & Level*** Professional/5 #LI-Hybrid #LI-ASO**Not The Perfect Fit?**Concerned that you may not meet the criteria precisely ...