4 of 4 Static Application Security Testing Jobs in the Midlands

security design reviews for new applications, APIs, integrations, and significant technology changes Select, implement, and manage application security tooling including SAST, DAST, SCA, and secrets detection platforms Review security testing results, assess risk, and provide clear recommendations to engineering teams on remediation and resolution activities … principles, secure coding practices, and common vulnerability classes including the OWASP Top 10 Hands‐on experience with application security tooling including SAST, DAST, SCA, secrets management, and vulnerability assessment tools Experience integrating security controls into CI/CD pipelines and cloud‐native development environments Strong understanding ...

pipelines across applications, APIs, and cloud platforms Develop and manage infrastructure as code with security-first principles Integrate automated security testing (SAST, DAST, dependency, container scanning) into the SDLC Embed threat modeling and security review gates into engineering workflows Monitor, detect, and respond to security … Considered Experience with healthcare regulatory frameworks (HIPAA, HITECH, CMS) Hands-on experience with Infrastructure as Code tools (Terraform, CloudFormation, ARM/Bicep) Proficiency with SAST/DAST, dependency/container scanning, and cloud security posture management Solid understanding of IAM, encryption, key management, and secure architecture principles Relevant security ...

Halfords is seeking an Application Security Lead to own and shape the security capability across a diverse technology estate. You will work with development, architecture, product owners, and third parties to embed secure-by-design … principles and ensure appropriate controls are built into delivery processes. This role requires threat modelling, security design reviews, and hands-on tooling across SAST, DAST, and SCA. #J-18808-Ljbffr ...

Develop and maintain Infrastructure as Code (Terraform, YAML or equivalent). Automate deployment, configuration and operational processes to enable secure and repeatable releases. Embed security controls throughout the software development lifecycle (SDLC). Implement and maintain CI/CD pipelines, including security scanning and compliance checks. Manage platform … teams. Experience deploying and managing infrastructure using Terraform. Experience building and deploying containerised applications. Experience implementing application and infrastructure monitoring solutions. Experience with SAST, DAST and software supply chain security tooling (e.g. SonarQube, Trivy). Experience with on-premises DevOps toolchains and platforms. This role will require ...