3 of 3 Permanent CodeQL Jobs in London

software development lifecycle. Experience with security assurance, control frameworks, architecture or capability mapping. Knowledge of application security tooling such as GitHub Advanced Security, CodeQL, Dependabot, Fortify, Qualys or Checkov beneficial. Strong stakeholder management with the ability to challenge technical and engineering teams. Knowledge of vulnerability management, exception governance ...

remediation strategies.Experience with GitHub Advanced Security (GHAS), including Code Scanning (SAST), Secret Scanning, and Dependency Review.Proficiency in SAST, DAST, and SCA tools (e.g., CodeQL, Burp Suite, OWASP ZAP, Snyk, Checkmarx, Veracode).Hands-on experience integrating security testing tools into CI/CD pipelines for automated security scanning, including designing ...

love to see (not required, but nice to have!): Experience or familiarity with running, maintaining, and customizing static analysis security testing tools such as CodeQL and Semgrep. Broad familiarity with programming language ecosystems and frameworks, particularly C++, JavaScript/TypeScript, Python, Java as well as well as modern systems ...