4 of 4 Permanent Static Application Security Testing Jobs in London

developing, and supporting the Application Security team to deliver high-quality AppSec services. Owning and operating application security tooling (including SAST and DAST) to ensure effective coverage across all in-scope applications. Embedding automated security testing and guardrails into CI/CD pipelines … related role, including 2+ years focused on AppSec. Experience leading, mentoring, or coaching engineers or security professionals. Hands-on experience with AppSec tooling (SAST, DAST, SCA, secrets management). Experience integrating security controls into CI/CD pipelines (eg, GitHub, AWS DevOps). Strong understanding of Agile, DevOps ...

engineering, product, legal, and commercial teams to embed security into lifecycle governance Define and implement a modern DevSecOps tooling strategy (CI/CD, SAST/DAST, SCM, automation) Drive secure coding, threat modelling, and supply chain security practices (SBOM, provenance, signing) Develop KPIs, metrics, and maturity models … practices (Agile, CI/CD, cloud, automation) Expertise in application security, threat modelling, and secure coding standards Experience implementing tooling ecosystems (e.g. SAST, DAST, SCA, pipeline automation) A track record of influencing senior stakeholders and driving cultural change Ability to build and lead both direct and virtual teams ...

Permanent Senior Security Engineer - London My client an insurance organisation in London has a requirement for a permanent Security Engineer, to join their IT department. Key Skills: Proven experience in a similar role within a mid/large sized organisation, preferably in a regulated industry such as Financial … accreditations covering multiple security domains. Cyber security subject matter expert with relevant certifications such as CISSP, CISM, CSSP, or equivalent. Proficiency in SAST, DAST and SCA with hands on experience integrating such tools into development pipelines. Extensive experience of consulting on projects, building in security requirements ...

practices, including: CI/CD pipelines and integrations. Git-based source control tools (eg, GitHub, GitLab, Bitbucket). Security technologies such as SCA, SAST, SBOM management, and container security. Desired: Background in software development is a strong advantage. Experience or exposure to MLOps is a plus. Senior Technical Sales ...