1 to 25 of 231 Permanent Secure Coding Jobs in London

other industry standards. Translate findings into practical remediation plans and developer guidance. Secure Development & DevSecOps Support the development of secure coding standards across technologies including Java, C and C++. Embed security throughout the Software Development Lifecycle (SDLC). Design and support secure … controls and assurance activities. Security Leadership & Developer Enablement Act as a subject matter expert for Application Security across the organisation. Deliver secure coding training, workshops and awareness sessions. Mentor development teams and promote security-first engineering practices. Drive adoption of secure development standards and methodologies. ...

team and provide crucial vulnerability management. You will be deployed in Cloud environments, and responsible for the design and implementation of secure coding practices. Why work for BPP? We know that work is just one part of your life. That is why we offer a thoughtfully designed … Product teams and ensure that security is embedded into the software development lifecycle As such, you will be responsible for: Secure Coding: Conducting secure code reviews and assist in identifying common vulnerabilities (e.g., XSS, CSRF, injection). And collaborating with developers to implement secure ...

standards. The role ensures the effectiveness of security practices in software development, manages security testing, drives operational maturity improvements, and oversees secure coding practices. Reporting to the Director of Security Development and Testing, you will be a key contributor in enabling secure software delivery. … analysis. Ensure appropriate tooling is used and maintained, and testing results are actioned. Track vulnerability remediation efforts and support developers with secure coding guidance. Monitor and report on testing coverage and issue resolution trends. Process ImprovementContribute to the enhancement of development and testing standards. Identify opportunities ...

cadence. The role combines senior software engineering, DevOps, SRE, test automation, application security, and legacy modernization. Approximately 70% of the work involves hands-on coding and configuration. The technical scope includes building effective automated test suites, remediating security vulnerabilities, performing dependency and reachability analysis, upgrading Java and NPM runtimes … deployment smoke tests using Test-Driven Development practices. Select appropriate automation-testing approaches per application and drive implementation, including the use of AI coding assistance. Source suitable test data and implement secure data masking for lower environments. Conduct vulnerability triage, root-cause and dependency reachability analyses, remediation ...

release cadence.The role combines senior software engineering, DevOps, SRE, test automation, application security, and legacy modernization. Approximately 70% of the work involves hands-on coding and configuration.The technical scope includes building effective automated test suites, remediating security vulnerabilities, performing dependency and reachability analysis, upgrading Java and NPM runtimes, modernizing … deployment smoke tests using Test-Driven Development practices.- Select appropriate automation-testing approaches per application and drive implementation, including the use of AI coding assistance.- Source suitable test data and implement secure data masking for lower environments.- Conduct vulnerability triage, root-cause and dependency reachability analyses, remediation ...

e.g., AI-assisted code review/refactoring, test acceleration, release readiness, incident/root-cause analysis), while establishing measurable validation standards (secure coding, peer review, automated testing) and promoting reuse of proven patterns and automation within the SDLC/TLM toolchain. Establishes an enterprise-aligned operating model … that improves throughput and quality without increasing risk. Defines and enforces measurable validation standards for AI-assisted changes (mandatory peer review, secure coding controls, automated test thresholds, performance/regression checks, release readiness criteria) and embeds them into CI/CD quality gates. Applies knowledge of tools ...

other relevant security standards. Identify vulnerabilities, understand their root causes and translate findings into practical remediation plans. Provide secure design and coding guidance throughout the development lifecycle. Help establish and evolve a pan-European Application Security capability within our Secure Development Centre of Excellence. Develop … promote consistent application security methodologies, standards and best practices. Support secure coding standards across technologies including Java, C, C++ and other relevant languages. Integrate security controls and automated testing into CI/CD pipelines , including SAST, DAST and SCA. Support threat modelling and vulnerability management across products ...

other relevant security standards. Identify vulnerabilities, understand their root causes and translate findings into practical remediation plans. Provide secure design and coding guidance throughout the development lifecycle. Help establish and evolve a pan-European Application Security capability within our Secure Development Centre of Excellence. Develop … promote consistent application security methodologies, standards and best practices. Support secure coding standards across technologies including Java, C, C++ and other relevant languages. Integrate security controls and automated testing into CI/CD pipelines , including SAST, DAST and SCA. Support threat modelling and vulnerability management across products ...

security advice throughout the development lifecycle, so they can ship quickly and safely Own our secure development and secure coding standards, and coordinate penetration testing across the delivery lifecycle Run threat modelling on the highest‐risk work, and set up the approach and training … guardrails and security considerations for modern cloud and serverless architecture Solid grounding in secure software development, including threat modelling, secure coding, awareness of common application security risks such as the OWASP Top 10, automated security testing and running penetration tests Practical experience across vulnerability management ...

external and execute internal penetration test engagements — scope, logistics, findings triage — and drive remediation to closure with engineering teamsMaintain and evolve secure coding standards, and run a security champions programme to scale AppSec practice across engineeringTrack and report on vulnerability management across the application estate, prioritising … experience with SAST/DAST/SCA tooling and CI/CD pipeline integrationStrong grasp of OWASP Top 10 and secure coding practices across at least one major language/framework used in a production environmentExperience coordinating and running penetration testing programmes, including remediation trackingComfortable communicating security ...

Analysis (SCA)/dependency scanning Secrets and credentials scanning Work with engineering teams to ensure consistent adoption of DevSecOps practices and secure coding approaches Support security architecture reviews and assurance activities for internally developed applications and services Identify and help reduce risks related to application vulnerabilities, insecure … coding practices and exposed credentials Support the coordination and execution of third-party penetration testing of our clients internet-facing applications Assist in defining test scope, tracking execution and ensuring remediation of findings is properly managed Provide guidance to engineering teams on remediation and prioritisation of vulnerabilities Contribute ...

e.g., AI-assisted code review/refactoring, test strategy acceleration, incident/root-cause analysis support), while establishing consistent validation standards (secure coding, peer review, automated testing) and promoting reuse of effective patterns across the team. Establishes clear "where AI helps/where it must not" guardrails … SDLC (design, coding, testing, deployment, operations), ensuring sensitive data handling and secure engineering practices are consistently applied. Implements a repeatable AI-assisted review workflow (PR checklist, quality gates, and approval criteria) that improves readability, reduces defects, and enforces standards for maintainability, performance, and security. Applies knowledge ...

e.g., AI-assisted code review/refactoring, test strategy acceleration, incident/root-cause analysis support), while establishing consistent validation standards (secure coding, peer review, automated testing) and promoting reuse of effective patterns across the team. Establishes clear “where AI helps/where it must not” guardrails … SDLC (design, coding, testing, deployment, operations), ensuring sensitive data handling and secure engineering practices are consistently applied. Implements a repeatable AI-assisted review workflow (PR checklist, quality gates, and approval criteria) that improves readability, reduces defects, and enforces standards for maintainability, performance, and security. Applies knowledge ...

Analysis (SCA)/dependency scanning Secrets and credentials scanning Work with engineering teams to ensure consistent adoption of DevSecOps practices and secure coding approaches Support security architecture reviews and assurance activities for internally developed applications and services Identify and help reduce risks related to application vulnerabilities, insecure … coding practices and exposed credentials Support the coordination and execution of third-party penetration testing of our client's internet-facing applications Assist in defining test scope, tracking execution and ensuring remediation of findings is properly managed Provide guidance to engineering teams on remediation and prioritisation of vulnerabilities Contribute ...

Analysis (SCA)/dependency scanning Secrets and credentials scanning Work with engineering teams to ensure consistent adoption of DevSecOps practices and secure coding approaches Support security architecture reviews and assurance activities for internally developed applications and services Identify and help reduce risks related to application vulnerabilities, insecure … coding practices and exposed credentials Support the coordination and execution of third-party penetration testing of our client's internet-facing applications Assist in defining test scope, tracking execution and ensuring remediation of findings is properly managed Provide guidance to engineering teams on remediation and prioritisation of vulnerabilities Contribute ...

RESTful APIs using .NET Core. Work with data from SQL (MS-SQL server) and NoSQL (MongoDb) databases and external APIs. Ensure secure coding practices are followed throughout the development lifecycle. Collaborate with cross-functional teams to integrate APIs with frontend and backend systems. Build and maintain responsive … years of experience in .NET Core and API development. Strong understanding of RESTful API design principles, software design patterns, and secure coding standards. Experience with Entity Framework, SQL Server, and version control systems (e.g., Git). Hands‐on experience with front‐end development using React, JavaScript/ ...

Code practices. Work collaboratively within Agile and scaled Scrum teams. Integrate emerging technologies, including AI-driven development . Promote clean architecture, secure coding and engineering best practices. Experience you'll need as a Lead Software Engineer Strong commercial experience designing and developing software using C# or Java … with Git and CI/CD tools such as Jenkins, GitHub or Azure DevOps . Understanding of application security, DevSecOps and secure coding practices. Experience working within Agile environments. What's on Offer £75,000£82,000 salary Hybrid working Opportunity to work on large-scale technology ...

share knowledge. Leads communities of practice across Software Engineering to drive awareness and use of new and leading-edge technologies. Leverages enterprise-authorized AI coding assist tools within the work environment to improve code quality, delivery speed, and productivity across complex deliverables (e.g., code generation/refactoring, unit test … creation, documentation), while validating outputs through peer review, automated testing, and secure coding standards; contributes learnings and reusable patterns to improve broader team effectiveness. Applies knowledge of tools within the Software Development Life Cycle toolchain, including enterprise-authorized AI-assisted development and automation capabilities, to improve ...

SaaS applications Develop and maintain APIs, databases and integrations with third-party systems Carry out code reviews and help set secure-coding standards Build and improve CI/CD pipelines and automated testing Write clear technical documentation Provide production support and troubleshooting What we are looking … Azure) Strong API design and development skills Solid database skills (relational and/or NoSQL) Experience with automated testing and secure-coding practices Nice to have Experience building SaaS products or working in regulated, compliance-driven environments. Familiarity with containers, infrastructure-as-code or wider DevOps practices. ...

cases, deliver useful increments, and iterate quickly based on feedback. Apply quality and security practices, including automated testing, peer review, secure coding and shift-left testing. Support the evaluation of AI system behaviour in real use, clearly communicating limitations, risks, quality and user impact. Use AI-assisted … coding tools responsibly to improve speed, quality and learning, while maintaining clear ownership of code quality. Engage in continuous improvement through code reviews, automated testing, documentation, evaluation design and metrics-driven iteration. The knowledge, experience and qualifications you need Strong software engineering background, with Python-first development experience. Experience ...

Experience managing engineering teams and technical leads. Full stack TypeScript and AWS experience is required. Track record of owning application security: secure coding practice, vulnerability management, audit and customer security review. Good to have Experience implementing development governance, DevOps practice, CI/CD and quality assurance standards. … measure real gains. Experience in SaaS, EdTech, FinTech or other product-led digital environments. Knowledge of cybersecurity standards and secure coding practices, and of the certifications customers ask about. Familiarity with international product deployments and multi-region infrastructure. Exposure to data-driven product optimisation and analytics frameworks. ...

assisted engineering practices within the team to improve code quality, delivery speed, testing, troubleshooting, and operational outcomes, while ensuring validation, secure coding, peer review, and compliance with firmwide standards. Required Qualifications, Capabilities, and Skills Formal training or certification on software engineering concepts and advanced applied experience, with … application development . Proficient in all aspects of the Software Development Life Cycle, including agile delivery, CI/CD, application resiliency, secure coding practices, testing, and production support. Strong communication skills with the ability to work effectively with technical and non-technical stakeholders in a fast-paced ...

application security posture management (ASPM), and partner with engineering teams to fix vulnerabilities in ways that prevent them recurring Build secure coding and deployment knowledge across the organisation through training and mentoring, including helping to establish and grow a security champions programme within our engineering teams Ensure … well as scoping and managing third‐party penetration tests in partnership with engineering teams and architects A strong grasp of secure coding practices and experience embedding security into software development workflows, including implementing technical controls and driving automation within CI/CD pipelines, ideally across cloud-native ...

mentor developers to build naturally resilient systems. As one of our Application Security Engineers, you'll: Provide expert guidance on secure coding, threat modelling, and OWASP Top 10 mitigation. Promote a security-first mindset across development teams, acting as a supportive technical mentor. Integrate security assessments, code … Experienced in application security (5+ years) with strong hands-on penetration testing and security tooling skills. Deeply knowledgeable about web vulnerabilities, secure coding practices, and cloud environments (AWS, Azure, or GCP).Familiar with DevSecOps methodologies and automated security integration. An open, clear communicator who can explain complex ...

includes: Reviewing product designs, technical designs, APIs, services, and integrations. Identifying security weaknesses in applications, workflows, and data flows. Advising engineering teams on secure implementation. Supporting secure design decisions during product discovery and delivery. Helping teams resolve security issues pragmatically without creating unnecessary delivery friction. 2. … SDLC) Embed security into the software development lifecycle across DTS. This includes: Defining and applying secure engineering standards. Supporting secure coding practices. Reviewing CI/CD security controls. Supporting SAST, DAST, SCA, secrets scanning, dependency scanning, and container scanning. Helping teams triage, prioritise, and remediate ...