26 to 44 of 44 Static Application Security Testing Jobs in the UK excluding London

underrepresented groups, and neurodivergent candidates. We offer reasonable adjustments throughout the hiring process and are dedicated to creating a supportive, accessible environment for everyone. Security Engineer (Scrum) Location: Hampshire (onsite 5 days per week) Due to the nature of the work and the customers we support, the successful candidate … security controls, identity management, and threat-mitigation patterns across cloud and hybrid infrastructures. • DevSecOps Integration: Oversee the embedding of automated security scanning (SAST, DAST, SCA, container scanning) into delivery pipelines. • Risk & Governance: Collaborate with MOD accreditors, Risk Owners, and project leadership to navigate security case approvals ...

industries to create a safer, sustainable and more connected world. Why you should join: Join a team where you'll shape cutting‐edge security architecture across embedded systems, cloud platforms, and mobile applications while driving compliance with leading industry standards. You'll play a key role in strengthening product … TARA activities and maintain risk tracking through the security case and register. Secure Development & DevSecOps Integrate security into CI/CD pipelines (SAST, DAST, SCA, container/IaC scans, SBOM) and define release gates. Maintain security workflows and coach engineers on secure coding and threat‐driven design. ...

organizations build secure, high-quality software, minimizing risks while maximizing speed and productivity. Black Duck, a recognized pioneer in application security, provides SAST, SCA, and DAST solutions that enable teams to quickly find and fix vulnerabilities and defects in proprietary code, open source components, and application behavior. … With a combination of industry-leading tools, services, and expertise, only Black Duck helps organizations maximize security and quality in DevSecOps and throughout the software development life cycle. DevOps Engineer will be a key member of the Cloud Operations team responsible for developing SaaS and Hosted services across ...

managed identity patterns, and network segmentation with Private Link, Azure Firewall and WAF rules. Deliver the DevSecOps tooling in GitHub Actions or Azure Pipelines: SAST, SCA, secrets, container and IaC scanning, with tuned rules, reusable pipeline templates and feedback developers can act on. Implement supply chain controls: SBOM generation, artifact … Cloud, Key Vault, and networking with NSGs, Private Link, Azure Firewall and WAF. DevSecOps tooling in GitHub Actions or Azure Pipelines: integrating and tuning SAST, SCA, secrets, container and IaC scanners, and building reusable pipeline templates. Infrastructure as code with Terraform or Bicep, and PowerShell or Python to automate controls ...

dependencies, build agents, artefact repositories and target environments Migrating applications from legacy deployment tooling onto Octopus Deploy Defining and embedding pipeline security controls - SAST, SCA, dependency scanning, secrets detection and artefact scanning (GitHub CodeQL, Dependabot, JFrog Xray and Curation) Managing software supply-chain controls: approved repositories, open-source governance … working knowledge of Bash/shell scripting Good understanding of Git workflows, artefact repositories, package versioning and environment promotion Experience implementing secure coding controls (SAST, SCA, secrets detection) and a good grasp of secure development principles, including authentication, secrets management, certificates and TLS Windows Server and on-premises hosting knowledge ...

across complex enterprise transformation programmes. This role will play a critical part in shaping cloud architecture, driving DevSecOps adoption, and ensuring technology solutions meet security, reliability, and regulatory requirements within a fast-paced delivery environment. Key Responsibilities Define and govern enterprise-scale Azure cloud and DevOps architecture standards across … Redis or Hazelcast. Expertise in API architecture, RESTful services, OpenAPI/Swagger standards, and integration design patterns. Demonstrated experience implementing DevSecOps controls, including SAST, DAST, secrets management, and compliance automation. Excellent stakeholder management, technical communication, and documentation skills. Bachelor's degree in Computer Science, Engineering, Information Technology, or a related ...

across complex enterprise transformation programmes. This role will play a critical part in shaping cloud architecture, driving DevSecOps adoption, and ensuring technology solutions meet security, reliability, and regulatory requirements within a fast-paced delivery environment. Key Responsibilities Define and govern enterprise-scale Azure cloud and DevOps architecture standards across … Redis or Hazelcast. Expertise in API architecture, RESTful services, OpenAPI/Swagger standards, and integration design patterns. Demonstrated experience implementing DevSecOps controls, including SAST, DAST, secrets management, and compliance automation. Excellent stakeholder management, technical communication, and documentation skills. Bachelor's degree in Computer Science, Engineering, Information Technology, or a related ...

organizations build secure, high-quality software, minimizing risks while maximizing speed and productivity. Black Duck, a recognized pioneer in application security, provides SAST, SCA, and DAST solutions that enable teams to quickly find and fix vulnerabilities and defects in proprietary code, open source components, and application behavior. ...

load for engineering teams, and improve release velocity. What You’ll Do Design, develop, and maintain CI/CD pipelines to automate software builds, testing, and releases. Build and maintain internal tooling to support the software development lifecycle (e.g., code quality analysis, dependency management, automated testing). Collaborate … coding assistants to accelerate authoring of CI/CD pipeline configurations, IaC scripts, and automation tooling. Apply AI-assisted security scanning (SAST) as an automated merge gate across engineering pipelines. Support delivery teams and partners to reduce the complexity of implementing IQGeo solutions. Participate in an on-call rotation. ...

Halfords is seeking an Application Security Lead to own and shape the security capability across a diverse technology estate. You will work with development, architecture, product owners, and third parties to embed secure-by-design … principles and ensure appropriate controls are built into delivery processes. This role requires threat modelling, security design reviews, and hands-on tooling across SAST, DAST, and SCA. #J-18808-Ljbffr ...

Develop and maintain Infrastructure as Code (Terraform, YAML or equivalent). Automate deployment, configuration and operational processes to enable secure and repeatable releases. Embed security controls throughout the software development lifecycle (SDLC). Implement and maintain CI/CD pipelines, including security scanning and compliance checks. Manage platform … teams. Experience deploying and managing infrastructure using Terraform. Experience building and deploying containerised applications. Experience implementing application and infrastructure monitoring solutions. Experience with SAST, DAST and software supply chain security tooling (e.g. SonarQube, Trivy). Experience with on-premises DevOps toolchains and platforms. This role will require ...

youre comfortable engaging with clients, understanding their needs, and translating them into effective outcomes. The Role: We are seeking a highly skilled and motivated Security Cleared DevOps Engineer to join our team. The successful candidate will be responsible for designing, implementing, and maintaining secure, scalable, and automated infrastructure solutions … Cloud Build, Artifact Registry and Cloud Deploy. Knowledge of GitOps practices and tools such as Argo CD or Flux. Experience implementing DevSecOps tooling, including SAST, DAST, container image scanning and dependency scanning. Familiarity with policy-as-code, automated compliance and security controls. Experience working in regulated, government, defence ...

Redgate is seeking a senior security engineer to embed security deeply into our product teams, defining requirements across the SDLC and leading threat modelling for new features. You’ll influence architecture, guardrails, and secure … default patterns, balancing risk with delivery velocity. Work across engineering and product squads in a hybrid role based in Cambridge. You’ll champion SAST/DAST, support AI security initiatives, and translate security findings into pragmatic engineering work #J-18808-Ljbffr ...

Senior DevOps Engineer Location: Newcastle Upon-Tyne Please Note: Any offer of employment is subject to satisfactory BPSS and SC security clearance which requires 5 years continuous UK address history (typically including no periods of 30 consecutive days or more spent outside of the UK) Accenture is a leading … pipelines supporting frequent, reliable deployments. Drive cloud cost optimisation and resource right‐sizing. Experience implementing security scanning in CI/CD with SAST and DAST Experience with deployment strategies such as Blue/Green or Canary Releases Proven track record of applying analytical and creative thought that translate into ...

patterns. Implement and maintain DevSecOps practices using Azure DevOps, building CI/CD pipelines with automated quality gates such as unit and integration tests, SAST/DAST where applicable, and dependency scanning. Drive observability and production excellence by implementing logging, metrics, and tracing, creating actionable alerts, defining SLOs and SLIs … maintaining high‐quality pull requests. Solid understanding of security, reliability, and operability in a regulated or enterprise environment. experience applying DevSecOps practices including SAST and DAST, and dependency scanning within CI/CD pipelines. Practical knowledge of modern identity and access management, including OAuth2 and OIDC. Additional Skills & Qualifications ...

DevOps Engineer Location: Newcastle Upon Tyne Please Note: Any offer of employment is subject to satisfactory BPSS and SC security clearance which requires 5 years continuous UK address history (typically including no periods of 30 consecutive days or more spent outside of the UK) Accenture is a leading global … Vault, AWS Secrets Manager) Maintain scalable CI/CD pipelines supporting frequent, reliable deployments. Experience implementing security scanning in CI/CD with SAST and DAST Experience with deployment strategies such as Blue/Green or Canary Releases Proven track record of applying analytical and creative thought that translate ...

environment As a DevOps Engineer, you will: Work as part of a DevOps team to deliver environments and tools to support the development and testing of features by Accenture and Client Teams. Setup and configure tools such as Gitlab, Jenkins, SonarQube and performance/security/resilience testing … apart: Experience with DevSecOps practices, including Secrets management (e.g. HashiCorp Vault, AWS Secrets Manager) Experience implementing security scanning in CI/CD with SAST and DAST Experience with deployment strategies such as Blue/Green or Canary Releases Proven track record of applying analytical and creative thought that translate ...

Security Architect L1 contractor to join our Sheffield-based security engineering team. You will embed security controls into DevSecOps workflows, integrating SAST into AI-generated code and securing CI/CD pipelines. The role focuses on implementing secrets scanning, secure code reviews, and security telemetry within … Claude Code environments, collaborating with engineering, security, and operations to protect client systems. #J-18808-Ljbffr ...

improving the way software is built, tested and deployed. You will work closely with development, infrastructure and cloud teams, helping to improve automation, reliability, security and overall engineering efficiency. What you will be doing Design, build and maintain Azure DevOps CI/CD pipelines across multiple environments. Automate build … remediate vulnerabilities across application code, CI/CD pipelines and Azure infrastructure. Integrate security tooling into development and deployment pipelines, including SAST, DAST and dependency scanning. Manage patching and updates across container images, Kubernetes components and Azure resources. Contribute to cloud platform governance, security standards and continuous ...

building and publishing reusable packages, templates, or internal libraries - with proper versioning, documentation, and consumption patterns Strong understanding of security-first engineering: encoding SAST/DAST integration, secret management, and policy-as-code into central platform assets Ability to work autonomously on complex technical problems while collaborating closely with … skills, subagents, and MCP servers that become the standard AI tooling distributed to all client teams Implement golden path templates - project scaffolding, pipeline configuration, security guardrails, AI-native workflow defaults, etc. Maintain and evolve how platform assets reach engineering teams: versioning, distribution across the appropriate channels (version-controlled component ...