21 of 21 Static Code Analysis Jobs in the UK

This one is for the brave and brilliant code warriors out there. On the hunt for Static Code Analysis experts ready to venture into uncharted territory and build groundbreaking solutions. Joining and building from the ground up, creating innovative tools, overlooked by mainstream solutions, and developing a platform with advanced static analysis as its … office environment, brainstorming, white-boarding, and celebrating victories together, as you drive the company's product to the forefront of the industry. Seeking individuals who possess a mastery in static analysis-a true black belt in the art of bug-slaying with tools you've crafted or implemented yourself. This role goes beyond technical prowess; you'll lead … the charge in integrating static analysis, language servers, and code tracing tools across our platform, selecting the perfect ones for the job and bringing them to life. With great responsibility comes great reward. Join a heavily VC-backed startup with fewer than 10 people, and help shape it into the next tech unicorn! If you're eager More ❯

massive-scale security problems. • Vulnerability identification and analysis. You will be responsible for finding new and novel ways to identify and resolve security vulnerabilities in our products. This includes static and dynamic code analysis, security scanning, investigation of security reports from InfoSec, our bug bounty program, or other trusted partners, and direct work with our incident response … of our team. Core Responsibilities Perform deep architecture and security reviews on highly complex products to identify vulnerabilities Lead engineering teams in feature design, threat modeling, and security-critical code and architecture Develop and implement automation to eliminate entire classes of weaknesses across the organization Drive decision-making by determining the tradeoffs between security and product design Lead implementation … Development or software engineering experience and a deep passion for information security Experience with a modern high-level programming language (e.g. Java, Golang, Javascript, Python, etc.) Demonstrated experience evaluating code for vulnerabilities and weaknesses Experience with complex architectures and codebases (e.g. SOA or micro-services) Experience utilizing/with CodeQL or other static code analysis platforms More ❯

quality and efficiency. You will have a driving role in defining, leading and implementing structured DevOps processes, tools and pipelines for things like FW configuration management, branching, revision control, code quality and review, debugging, profiling and metrics, code security and repository partitioning, code portability and dependencies, automated build, test coverage and automated test, continuous integration and releasing …/FW Significant release management experience in planning and execution of high-quality releases on schedule Significant experience with relevant software engineering tools for revision control (Git, branching strategy), code quality and review (Github, static code analysis tools e.g. PC-lint Plus), build (e.g. Make), code security (repository partitioning and automatic obfuscation), testing (e.g. GoogleTest More ❯

What background we are looking for: Programming in one or more of JavaScript, Java, .Net, Python Collaboratively designing and building Proof of Concept or Production systems Source controlling your code with Version Control Systems, for example Git, Mercurial, Perforce Utilising CI/CD tools, such as Bamboo, Jenkins, TeamCity, Bitbucket, in order to streamline delivery of new features and … fixes Continual testing of code using Automated Testing Frameworks Ensuring code consistency and quality by utilising static code analysis tools e.g. SonarQube Team working inside an agile environment e.g. Scrum, Lean, Kanban Common software design patterns Using precedent and your own creativity to solve our client's challenges! It would be great if you also More ❯

solutions. What background we are looking for: Programmingin one or more of JavaScript, Java, .Net, Python Collaboratively designing and building Proof of Concept or Production systems Source controlling your code with Version Control Systems, for example Git, Mercurial, Perforce UtilisingCI/CD tools, such as Bamboo, Jenkins, TeamCity, Bitbucket, in order to streamline delivery of new features and fixes … Continual testing of code using Automated Testing Frameworks Ensuring code consistency and quality by utilising static code analysis tools e.g. SonarQube Team working inside an agile environment e.g. Scrum, Lean, Kanban Common software design patterns Using precedent and your owncreativity to solve our client's challenges! It would be great if you also had experience More ❯

solutions. What background we are looking for: Programmingin one or more of JavaScript, Java, .Net, Python Collaboratively designing and building Proof of Concept or Production systems Source controlling your code with Version Control Systems, for example Git, Mercurial, Perforce UtilisingCI/CD tools, such as Bamboo, Jenkins, TeamCity, Bitbucket, in order to streamline delivery of new features and fixes … Continual testing of code using Automated Testing Frameworks Ensuring code consistency and quality by utilising static code analysis tools e.g. SonarQube Team working inside an agile environment e.g. Scrum, Lean, Kanban Common software design patterns Using precedent and your owncreativity to solve our client's challenges! It would be great if you also had experience More ❯

London (Hybrid - 3 days onsite) Salary: Up to £64,000 Job Type: Permanent Key Responsibilities • Design and build secure, scalable platforms using AWS (preferred) or Azure • Define infrastructure-as-code pipelines using Terraform, CI/CD tooling (Jenkins, Bamboo, Bitbucket) • Collaborate within cross-functional Agile teams to deliver Proof of Concept and Production systems • Contribute to automated testing strategies … and static code analysis (e.g. SonarQube) • Integrate platform solutions into mission-critical systems in national security environments • Support new team formation and DevOps capability uplift across London, Leeds, and Manchester hubs Requirements • Proficient in one or more programming languages: Python, .NET, JavaScript, or Java • Strong experience with containerisation (Docker, Kubernetes), version control (Git) • Experience delivering CI/ More ❯

world solutions for UK Government and National Security clients. As a Platform Engineer, you will: • Design and build secure, cloud-native systems for critical government projects • Write clean, testable code in one or more languages: Python, Java, .Net, JavaScript • Utilise modern CI/CD tools (Jenkins, Bitbucket, Bamboo, TeamCity) to streamline delivery • Contribute to the design and execution of … automated testing and static code analysis • Work collaboratively in Agile teams using Scrum, Lean, or Kanban practices • Use tools like Git , Mercurial, or Perforce for version control and code management • Help shape the direction of new projects or proof-of-concepts using innovative approaches Desirable (but not essential) skills we value: • Cloud platform deployment on AWS More ❯

Designing and building Proof of Concept and Production systems collaboratively Source control (e.g. Git, Mercurial, Perforce) CI/CD tools (e.g. Bamboo, Jenkins, TeamCity, Bitbucket) Automated testing frameworks and static code analysis tools (e.g. SonarQube) Agile methodologies (Scrum, Kanban, Lean) Experience mentoring, coaching or managing others in the team Desirable Skills Cloud platforms: AWS, Azure Containerisation: Docker More ❯

Designing and building Proof of Concept and Production systems collaboratively Source control (e.g. Git, Mercurial, Perforce) CI/CD tools (e.g. Bamboo, Jenkins, TeamCity, Bitbucket) Automated testing frameworks and static code analysis tools (e.g. SonarQube) Agile methodologies (Scrum, Kanban, Lean) Experience mentoring, coaching or managing others in the team Desirable Skills Cloud platforms: AWS, Azure Containerisation: Docker More ❯

performance What You'll Bring Solid scripting experience (e.g. PowerShell, Python, or similar) Experience in one or more programming languages (C#, Java, or Python) Strong understanding of Infrastructure as Code using tools like Terraform , Ansible , or equivalent Containerisation knowledge ( Docker ) and orchestration experience ( Kubernetes , Docker Swarm, etc.) CI/CD pipeline experience (preferably TeamCity ) Familiarity with SQL Server and … a proactive, problem-solving attitude Financial services experience is a plus but not required Nice-to-Have Experience Atlassian tools (JIRA, Bitbucket) Artifactory or similar artefact storage Octopus Deploy Static code analysis tools (e.g. SonarQube) Control-M job scheduling Cloud platform experience (Azure, AWS, GCP) VMware (vSphere) and SAN storage Why Join Us? Impact from day one More ❯

for customers. Will work to convert a problem statement to a design and implementation. Will document details of functionality, design and architecture of a component. You will participate in code reviews with other engineers. Can understand the impact of code changes- both programmable and logical changes. Can "piece together" relevant existing functionality and quickly come up with a … prototype or solution. Encourage or host reviews on Application source code and technical documentation. Collaborate with team members, key stakeholders, and business groups to Categorize and describe solutions for business and technical requirements. About You : Design, build and maintain efficient ,reusable, and reliable C++ code for Trellix products. Overall 5+ years of experience specifically in C++ is must … for the projects and deliverable elements. Solutions must meet the preset goals for quality, security, and performance. Good knowledge of operating system fundamentals Working knowledge of tools like WinDbg, Static Code analysis tools, Application Verifier, etc. Good organizational and time-management skills Meticulous at both analysis and execution Ability to collaborate and work with multiple teams More ❯

or Production systems collaboratively Using version control systems (e.g. Git, Mercurial, Perforce) Working with CI/CD tools (e.g. Bamboo, Jenkins, TeamCity, Bitbucket) to streamline delivery Automated testing and static code analysis (e.g. SonarQube) to ensure quality It would be great if you also had experience with: Machine learning frameworks (e.g. TensorFlow, AWS/Azure ML) Cloud More ❯

while enforcing contextual integrity, rate limiting, and audit logging Apply agentic patterns to automate complex financial tasks such as client onboarding, document summarisation, and risk signal extraction Security Tooling Static code analysis (Bandit, SonarQube) Secrets scanning, encryption (at rest/in-transit), token management Identity integration (Google Identity, Azure Entra ID) Data Security & Governance RAG pipelines with … data classification, masking, and DLP GDPR and data residency compliance MLOps & DevSecOps GitHub Actions, CI/CD security testing, model drift detection, audit logging Lab Environment Tooling Infrastructure-as-Code (IaC): Terraform, Pulumi Containerization & Orchestration: Docker, Kubernetes (GKE/AKS) Networking & Isolation: VPCs, private endpoints, firewall rules, network policies Data Sandboxing: Synthetic datasets, masking, DLP tooling Monitoring & Observability: Prometheus More ❯

while enforcing contextual integrity, rate limiting, and audit logging Apply agentic patterns to automate complex financial tasks such as client onboarding, document summarisation, and risk signal extraction Security Tooling Static code analysis (Bandit, SonarQube) Secrets scanning, encryption (at rest/in-transit), token management Identity integration (Google Identity, Azure Entra ID) Data Security & Governance RAG pipelines with … data classification, masking, and DLP GDPR and data residency compliance MLOps & DevSecOps GitHub Actions, CI/CD security testing, model drift detection, audit logging Lab Environment Tooling Infrastructure-as-Code (IaC): Terraform, Pulumi Containerization & Orchestration: Docker, Kubernetes (GKE/AKS) Networking & Isolation: VPCs, private endpoints, firewall rules, network policies Data Sandboxing: Synthetic datasets, masking, DLP tooling Monitoring & Observability: Prometheus More ❯

of the following technical areas are desirable: XML SQL PHP Skills and responsibilities: Assistance with design activities and prototyping. Design and implement software, based on requirements and/or analysis artefacts. Implement and perform unit tests reflecting system specifications. Implement and maintain the necessary software development lifecycle artefacts. Working experience in using static code analysis software More ❯

proven security testing frameworks into high throughput environments Infrastructure security best practices within IaC, ideally Terraform Experience with external security audits and certification procedures Experience with implementing tooling and static code analysis to detect and flag vulnerabilities as part of our CI process Experienced using GitHub with a firm understanding of various branching/merging strategies Key More ❯

science and MLOps/LLMOps workflows. Collaborate with Data Scientists to deploy, serve, and monitor LLMs in real-time and batch environments using Amazon SageMaker, Bedrock Implement Infrastructure-as-Code with AWS CDK, CloudFormation to provision and manage cloud environments. Build and maintain CI/CD pipelines using GitHub Actions, AWS CodePipeline, CodeBuild, Jenkins. Integrate monitoring and observability tools … CloudWatch, Prometheus, Grafana for infrastructure and model health tracking. Ensure software quality through Test-Driven Development (TDD), unit testing frameworks (e.g., pytest, unittest), and automated integration tests. Conduct regular code reviews, participate in pair programming, and advocate for clean code, modular design, and maintainable architecture. Collaborate with architects and stakeholders to design high-level system architecture for cloud … integrated products. Enforce security best practices (IAM, encryption, VPC configuration, audit logging) using AWS native services and third-party tools. Embed security throughout the software development lifecycle by integrating static and dynamic code analysis, vulnerability scanning, and policy-as-code tools into CI/CD pipelines-ensuring DevSecOps principles are applied from design to deployment. Promote More ❯

instrumentation, debugging and optimization using Android/Windows/Linux testing tools. Basic understanding of the Linux kernel, system software and device drivers, and Android internals. Exposure to both static and dynamic code analysis tools. Understanding ARM architecture. Both pre-silicon and post-silicon validation expertise. Familiarity with Arm SystemReady SR Compliance Program Experience with Security Development More ❯

instrumentation, debugging and optimization using Android/Windows/Linux testing tools. Basic understanding of the Linux kernel, system software and device drivers, and Android internals. Exposure to both static and dynamic code analysis tools. Understanding ARM architecture. Both pre-silicon and post-silicon validation expertise. Familiarity with Arm SystemReady SR Compliance Program Experience with Security Development More ❯

strength in regression test automation. Hands-on experience with Selenium (or equivalent tools), and API testing using Postman. Proficiency in using SonarQube or similar tools for pipeline testing and static code analysis. Solid understanding of QA best practices, Agile methodologies, and the full SDLC. Proven ability to define, maintain, and execute robust manual and automated test strategies. Excellent More ❯