4 of 4 Permanent CodeQL Jobs in England

ability to investigate and resolve complex technical issues across the software delivery lifecycle. Experience with JFrog Advanced Security/Curation, GitHub Advanced Security, CodeQL, Dependabot, Terraform, Docker, Kubernetes, SBOMs, software signing/attestation or cloud-native platforms would be highly advantageous. Knowledge of Java, .NET, JavaScript/TypeScript, Python ...

software development lifecycle. Experience with security assurance, control frameworks, architecture or capability mapping. Knowledge of application security tooling such as GitHub Advanced Security, CodeQL, Dependabot, Fortify, Qualys or Checkov beneficial. Strong stakeholder management with the ability to challenge technical and engineering teams. Knowledge of vulnerability management, exception governance ...

strategies. Experience with GitHub Advanced Security (GHAS), including Code Scanning (SAST), Secret Scanning, and Dependency Review. Proficiency in SAST, DAST, and SCA tools (e.g., CodeQL, Burp Suite, OWASP ZAP, Snyk, Checkmarx, Veracode).Hands-on experience integrating security testing tools into CI/CD pipelines for automated security scanning, including ...

love to see (not required, but nice to have!): Experience or familiarity with running, maintaining, and customizing static analysis security testing tools such as CodeQL and Semgrep. Broad familiarity with programming language ecosystems and frameworks, particularly C++, JavaScript/TypeScript, Python, Java as well as well as modern systems ...