1 to 25 of 50 Permanent Dynamic Application Security Testing Jobs in England

have a background in Application Security, DevSecOps or Product Security, with hands-on experience embedding application security into the SDLC If so, this could be an opportunity worth considering. Join a well-established health research organisation and charity supporting large-scale medical research. You will … controls and cloud security governance. Experience with KQL. Experience securing APIs, internet-facing services, Kubernetes, preferably AKS, and containerised environments. Experience with SAST, DAST, IAST and SCA. Knowledge of security automation, security-/policy-as-code and secure engineering practices. Familiarity with GitHub and GitHub Actions. Experience ...

outcomes across both internal IT systems and customer-facing solutions. Strong knowledge of application security principles and practices Experience with SAST, DAST and software composition analysis tools Knowledge of secure coding practices across languages such as Java, C, C++ Experience with CI/CD pipelines and DevSecOps … control environments Familiarity with NIST frameworks, particularly NIST CSF and NIST SSDF, demonstrated through training or experience Relevant vendor certifications linked to SAST, DAST, SCA or pipeline tooling where used in the organisation Evidence of continuous professional development in secure coding, software assurance or emerging technologies such as AI security ...

level supporting multiple workstreams and release pipelines. Ability to oversee the delivery and operation of application and container security services, including SAST, DAST, SCA, RASP, perimeter scanning, and associated security testing capabilities. Experience of supporting Red Team and penetration testing activities, including test planning, scheduling … Penetration Testing Veracode & SonarQube ATS Optimization Keywords Hard Skills Application Security Vulnerability Management Security Testing Secure Coding Practices SAST DAST SCA RASP Perimeter Scanning Risk-Based Prioritization Soft Skills Leadership Coaching Stakeholder Reporting Collaboration People Management Industry Keywords Application Security Strategy Security ...

DevSecOps Engineer - Azure/Application Security We're working with an established organisation looking to appoint an experienced DevSecOps Engineer to strengthen its Azure deployment and application security capabilities. This is a hands-on position combining Azure DevOps, cloud infrastructure and application security. … Private Endpoints and Front Door/WAF Introducing deployment practices such as blue/green releases, automated rollback and infrastructure drift detection Integrating SAST, DAST, dependency and container scanning into development pipelines Conducting web application security testing using Burp Suite, OWASP ZAP or similar tools Identifying ...

measures to prevent security incidents - Implement and manage SAST/SCA tooling across application repositories to identify source code risks - Scale automated DAST solutions across applications to maximise testing coverage - Carry out penetration testing on internally developed applications Required Skills/Experience: - Experienced in application security focussing on red, blue or purple team activities - Experienced in software development or experience contributing to Open-Source projects - Experienced with DAST tools such as Burp Suite, OWASP Zap or similar - Experience with SAST/SCA tools such as Snyk, Veracode, Checkmarx or similar - Proficient ...

Tripadvisor, Inc. (Nasdaq: TRIP), include a portfolio of travel brands and businesses, including Tripadvisor, Viator, and TheFork. We are looking for an experienced Senior Application Security Engineer to join our growing team at Tripadvisor Experiences. In this role, you will take a lead position in securing the applications … , including expertise in secure coding practices, threat modelling, vulnerability assessments, and incident response. Hands-on experience with security testing tools (SAST, DAST) and their integration into development pipelines. Strong understanding of advanced security concepts such as encryption, secure software design, identity management, and API security. Experience ...

Role As an Application Security Architect, you are a security expert and evangelist. You provide subject matter expertise and security guidance to product engineering teams and IT to design and build secure solutions, drive the implementation of security best practices, establish security architecture standards … platform offerings and security related services Experience with web application security scanning software and related assessment tools such as SAST/DAST/SCA Working knowledge of encryption, hashing, secure random number generation, key derivation, key management, digital signatures Understanding of internet-scale, distributed, multi-tenant architecture ...

Learn more at the company.com. Role Overview This is a transformational role. The Director is expected to lead the organization from fragmented, task-based security handling into a mature, agile program — modernizing how security is embedded across engineering, redefining operational efficiency, and setting how the cybersecurity function operates … across application, cloud, and infrastructure layers — risk-based prioritization, engineering ownership models, and remediation SLAs. Oversee application security testing — SAST, DAST, SCA — and the offensive security program including pen testing and red team engagements. Own cloud security posture across the estate — CSPM, container ...

Security/Python/DevSecOps/Azure/Security Engineer Role: Senior Application Security Engineer Remote UK | 1 day per week in London Salary: Up to £85,000 We’re looking for a Senior Application Security Engineer to join our security team … secure applications and platforms. The role Embed security into the SDLC and CI/CD pipelines, including GitHub Actions. Implement and operate SAST, DAST, IAST and SCA tooling. Secure applications, APIs, Kubernetes and containers. Develop security and policy-as-code capabilities using tools such as OPA. Help secure ...

diverse, ambitious team that celebrates creativity and collaboration. Ready to make your mark? Join us and be part of something bigger. As a Senior Security Engineer, you will work in close collaboration with our technology teams to design and implement secure, cloud-based software solutions for our clients. Working … lifecycle, embedding security practices (e.g. vulnerability management, threat modelling etc.) and automating security artifact generation (e.g. secret scanning, container security, SAST, DAST etc.). You will provide subject matter expertise in application security or cloud security sharing knowledge on threats and vulnerabilities, identifying appropriate ...

product decisions from day one—not after the fact Own and evolve our application security program including establish and maintain SAST/DAST scanning in CI/CD pipelines, conducting security code reviews for critical changes, and building automation that catches vulnerabilities before they reach production Partner … review code across multiple languages, understanding both business logic and security implications Knowledge of security tools and methodologies including SAST/DAST solutions, vulnerability management platforms, security testing frameworks, and DevSecOps practices—you know which tools to use and when automation beats manual review Excellent communication ...

clients in three continents with headquarters in the UK. What is the role? The role is accountable for defining, operating and evidencing the information security governance framework. Technology and Engineering teams remain responsible for implementing and operating technical controls, subject to oversight, assurance and challenge from the Information Security … Technology teams to embed security into the software development lifecycle, including secure design reviews, threat modelling, secure coding standards, dependency scanning, SAST/DAST tooling, secrets management, application/API penetration testing, vulnerability remediation tracking and release security governance. Support DORA-related client and contractual obligations ...

Application Security Engineer at HL, you will play a key role in strengthening the security of our products and services. Partnering with Engineering and other security functions, you'll embed and enhance security across the SDLC. You will help shape our security tooling strategy … source code build/deploy tools (e.g. Github, Gitlab CI/CD, Harness, Jenkins). Experience with common application security tooling (SAST, DAST, SCA) and vulnerability aggregation or ASPM Platforms to consolidate and prioritise findings across multiple sources. Hands-on experience of cloud platforms (AWS, Azure), including deploying ...

Description As an Application Security Engineer at HL, you will play a key role in strengthening the security of our products and services. Partnering with Engineering and other security functions, you'll embed and enhance security across the SDLC.You will help shape our security … frameworks, source code build/deploy tools (e.g. Github, Gitlab CI/CD, Harness, Jenkins).Experience with common application security tooling (SAST, DAST, SCA) and vulnerability aggregation or ASPM Platforms to consolidate and prioritise findings across multiple sources. Hands-on experience of cloud platforms (AWS, Azure), including deploying ...

areas including IAM, zero‐trust networking, secrets management, RBAC, pod security and encryption. Embed shift‐left security into engineering workflows, integrating SAST, DAST, dependency scanning and SCA into our CI/CD pipelines. Partner directly with Engineering and Product teams on architectural decisions, technical trade‐offs and secure … including IAM, RBAC, network segmentation, secrets management, image scanning and pod security. Experience integrating security tooling into CI/CD environments, including SAST, DAST, SCA and dependency scanning. Experience with infrastructure‐as‐code security and technologies such as Terraform, Helm or GitOps. Understanding of application ...

Help build a new cyber security capability from the ground up. HM Land Registry (HMLR) is building a new Red Team capability to strengthen the cyber resilience of one of the UK's most important national services. Inspire People is partnering with HMLR to recruit a Senior Infrastructure Specialist … adversary emulation. Experience gathering, analysing and interpreting technical security information. Knowledge of security technologies such as SIEM, EDR/XDR, CTEM, DAST, WAF/DDoS, Entra ID, IPS/IDS, PKI or SASE. Experience using security testing techniques, frameworks and methodologies. Scripting capability in Python, PowerShell ...

doing: Were on a mission to build a tech-forward, secure environment that empowers developers rather than putting roadblocks in their way. As an Application Security Engineer, youll act as a core technical guide across our software development lifecyclehelping us embed security directly into our code … mentor. Integrate security assessments, code reviews, and penetration testing seamlessly into the SDLC. Evaluate, implement, and run modern security tooling (SAST, DAST, IAST) to streamline vulnerability checks. Research emerging AI and LLM threat classes to design proactive, cutting-edge defensive architectures. Participate in incident response investigations ...

doing: Were on a mission to build a tech-forward, secure environment that empowers developers rather than putting roadblocks in their way. As an Application Security Engineer, youll act as a core technical guide across our software development lifecyclehelping us embed security directly into our code … mentor. Integrate security assessments, code reviews, and penetration testing seamlessly into the SDLC. Evaluate, implement, and run modern security tooling (SAST, DAST, IAST) to streamline vulnerability checks. Research emerging AI and LLM threat classes to design proactive, cutting-edge defensive architectures. Participate in incident response investigations ...

Founding Security Engineer (Application & Infrastructure) Build the shield that makes Enterprise Superintelligence trustworthy London/Remote • Full-time • Pavo Labs About Pavo Pavo is building Enterprise Superintelligence: compounding systems that take ownership of business outcomes and work with humans to deliver them. We believe that while foundation models … Secure SDLC & DevSecOps: Embed security into our CI/CD pipelines without slowing down our high-velocity engineering team. Integrate automated SAST/DAST scanning, dependency management (SCA), and secret detection into our daily workflow. Cloud & Infrastructure Hardening: Work closely with Systems Engineers to secure our Kubernetes clusters ...

modern, cloud-based technology stack to deliver products. The AppSec Engineer will work in an engineering capacity to product and engineering teams to ensure security is baked into the product from the design phase creating a SecDevOps workflow. What you will be doing Design Establish and lead security … Champion sessions to keep developers aware of security developments Engineer Establish security into the CICD pipeline such as SAST/IAST/DAST Automate and build nifty security tools to test Matillion applications Integrate testing, build failures and outputs to the development team to ensure passage ...

standards, patterns, guardrails, and risk exceptions Lead threat modelling for new features and architectural changes, turning findings into practical engineering work Drive SAST/DAST adoption and quality, from tool tuning to severity calibration and developer-facing triage guidance Support product teams adopting AI, including LLMs, SLMs, and MCP, giving … ecosystem, with exposure to Java or Python Strong knowledge of the OWASP Top 10 and practical mitigation patterns Experience implementing or improving SAST/DAST processes: tool tuning, triage workflows, and reducing signal to noise Working understanding of cloud and container security fundamentals, ideally with AWS and Docker What ...

secure AI software development, helping millions of developers develop fast and stay secure as AI transforms how software is built. Our AI-native Developer Security Platform integrates seamlessly into development and security workflows, making it easy to find, fix, and prevent vulnerabilities — from code and dependencies to containers … market efforts. The Solution Architect is first and foremost a subject matter expert in Application Security testing (SAST, SCA, DAST, etc) and/or agentic software development & building AI-native applications. You will partner with pre-sales teams and leverage this technical expertise to define “big picture ...

over 90 million wallet holders and more than 40 million verified users, facilitating over $1 trillion in crypto transactions. You will operate the Product Security programe for the company.com’s internally-developed products across Consumer, OTC and MRE lines. This is a senior, hands-on role: you’ll design … is integrated from the design phase. Secure SDLC Operator: Operate and improve the secure development lifecycle. This includes orchestrating SAST/SCA/DAST, streamlining SARIF ingestion, PR review standards, CI/CD security automation, and vulnerability triage workflows. AI-Driven SDLC Innovation: Research, architect, and safely embed ...

.Cyber Security Business Information Officer (BISO) page is loaded## Cyber Security Business Information Officer (BISO)locations: Oxford: Londontime type: Full timeposted on: Posted Todayjob requisition id: R112581**About Our Team**The Business Information Security Office (BISO) team partners with business, product, and technology leaders to deliver measurable … security experience (AWS, Azure, GCP; secure SDLC).* Hands‐on knowledge of security tooling (SIEM, SOAR, EDR/XDR, CSPM, SAST/DAST).* Experience embedding security into CI/CD pipelines and DevSecOps practices.* Proven capability in risk assessments, threat modeling, and control gap analysis.* Experience ...

## .Cyber Security Business Information Officer (BISO) page is loaded## Cyber Security Business Information Officer (BISO)locations: Oxford: Londontime type: Full timeposted on: Posted Todayjob requisition id: R112581**About Our Team**The Business Information Security Office (BISO) team partners with business, product, and technology leaders to deliver … security experience (AWS, Azure, GCP; secure SDLC).* Hands‐on knowledge of security tooling (SIEM, SOAR, EDR/XDR, CSPM, SAST/DAST).* Experience embedding security into CI/CD pipelines and DevSecOps practices.* Proven capability in risk assessments, threat modeling, and control gap analysis.* Experience ...