1 to 25 of 63 Permanent Static Application Security Testing Jobs in London

have a background in Application Security, DevSecOps or Product Security , with hands-on experience embedding application security into the SDLC If so, this could be an opportunity worth considering. Join a well-established health research organisation and charity supporting large-scale medical research. You will … controls and cloud security governance. Experience with KQL. Experience securing APIs, internet-facing services, Kubernetes, preferably AKS, and containerised environments. Experience with SAST, DAST, IAST and SCA. Knowledge of security automation, security-/policy-as-code and secure engineering practices. Familiarity with GitHub and GitHub Actions. ...

tooling and capabilities. Provide technical leadership for secure development technologies including Software Composition Analysis (SCA), Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), container security, code signing and secret detection. Integrate security tooling into CI/CD pipelines … security programmes and tooling. Strong knowledge of application security practices, secure coding principles and vulnerability management. Experience working with SCA, SAST, DAST and related application security technologies. Strong experience integrating security into CI/CD pipelines and DevSecOps environments. Experience with automation ...

including automated testing and policy enforcement Design and implement application security controls, including: Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST) Software Composition Analysis (SCA)/dependency scanning Secrets and credentials scanning Work with engineering teams to ensure … integrating DevSecOps tooling within CI/CD environments (e.g. GitLab pipelines) Experience with application security testing tools and practices, including: SAST, DAST, SCA/dependency scanning andSecrets/credentials scanning. Experience contributing to security design reviews for applications and APIs Experience supporting or participating in penetration ...

including automated testing and policy enforcement Design and implement application security controls, including: Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST) Software Composition Analysis (SCA)/dependency scanning Secrets and credentials scanning Work with engineering teams to ensure … integrating DevSecOps tooling within CI/CD environments (e.g. GitLab pipelines) Experience with application security testing tools and practices, including: SAST, DAST, SCA/dependency scanning and Secrets/credentials scanning. Experience contributing to security design reviews for applications and APIs Experience supporting or participating ...

including automated testing and policy enforcement Design and implement application security controls, including: Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST) Software Composition Analysis (SCA)/dependency scanning Secrets and credentials scanning Work with engineering teams to ensure … integrating DevSecOps tooling within CI/CD environments (e.g. GitLab pipelines) Experience with application security testing tools and practices, including: SAST, DAST, SCA/dependency scanning and Secrets/credentials scanning. Experience contributing to security design reviews for applications and APIs Experience supporting or participating ...

findings and work with developers on remediation. Monitor and troubleshoot security tooling and CI/CD pipelines, investigating failures and root causes. Use SAST, DAST, SCA and other automated security tooling to support secure software development. Conduct threat modelling and secure design reviews for new features, services … code and interpreting findings from security tools. Worked directly with software engineers to prioritise and remediate security issues. Hands‐on experience with SAST, DAST, SCA or similar security tooling within CI/CD environments. Practical knowledge of threat modelling and secure software development. Enough coding or scripting ...

place Assess the security posture of our applications and APIs through code reviews and static and dynamic security testing (SAST/DAST), and manage third-party penetration tests, from scoping with engineering teams and architects through to tracking remediation Strengthen the security … secure approaches to authentication and authorisation, such as OAuth 2.0 and OpenID Connect Hands‐on experience with security testing tools such as SAST, DAST and vulnerability scanning solutions, ideally including mobile app security testing and API security testing tools Practical experience with threat modelling ...

CISO Bring consistent security tooling into every pipeline, including credential scanning, software composition analysis (SCA), static application security testing (SAST) and dynamic application security testing (DAST) Configure that tooling to our standards so it helps engineers rather than creating noise they learn … coding tools in your day-to-day work Fluent written and spoken English Nice to haves Experience introducing security tooling, such as SAST, DAST, SCA or secret scanning, into an enterprise DevOps experience in a regulated enterprise, such as financial services Experience building AI agents or LLM-based automation ...

asthe function matures. Key Responsibilities Vulnerability Management & Security Tooling Support the rollout and operation of application security tooling across engineeringrepositories, including SAST, SCA and secrets detection. Triage and classify security findings across repos, driving remediation of the secrets backlog Manage the day-to-day operation … recommendations to engineering teams. Working proficiency in Python (able to read, modify, and write scripts used for internal tooling) Practical experience with DAST/SAST/SCA/secrets scanning tools (Aikido, Snyk, Semgrep,Checkmarx, or similar) Experience with Prisma Cloud or a comparable cloud-native security platform Comfortable ...

client is a global legal and business information company. Senior Cloud & AI Security Enablement Engineer Enthusiastic about securing cloud platforms and AI-driven solutions in a rapidly evolving technology landscape? Do you enjoy designing security frameworks, enabling secure development practices, and partnering with engineering teams to build resilient … , vulnerability management, and secure CI/CD. Experience with infrastructure-as-code and cloud security tooling such as CSPM, CNAPP, IaC scanning, SAST, SCA, secrets scanning, or policy-as-code. Ability to translate security standards and architecture requirements into practical implementation patterns. Familiarity with generative ...

able to interact and collaborate in person. About Engineering at Engine by Starling - https://enginebystarling.com/careers/engineering/As a Security Engineer at Engine, you'll be working on helping to keep our infrastructure secure and compliant and our staff safe and productive. … lifecycle Experience performing secure code reviews and security approvals, including the use of static and dynamic application security testing (SAST/DAST) tools Experience in cryptography management and enhancements Relevant security certifications such as ISC2 CC, CISSP, CCSP, CISM, AWS Security Specialty ...

considerations shape product decisions from day one—not after the fact Own and evolve our application security program including establish and maintain SAST/DAST scanning in CI/CD pipelines, conducting security code reviews for critical changes, and building automation that catches vulnerabilities before they reach … read and review code across multiple languages, understanding both business logic and security implications Knowledge of security tools and methodologies including SAST/DAST solutions, vulnerability management platforms, security testing frameworks, and DevSecOps practices—you know which tools to use and when automation beats manual review ...

able to interact and collaborate in person. About Engineering at Engine by Starling — https://enginebystarling.com/careers/engineering/As a Security Engineer at Engine, you'll be working on helping to keep our infrastructure secure and compliant and our staff safe and productive. … lifecycle Experience performing secure code reviews and security approvals, including the use of static and dynamic application security testing (SAST/DAST) tools Experience in cryptography management and enhancements Relevant security certifications such as ISC2 CC, CISSP, CCSP, CISM, AWS Security Specialty ...

considerations shape product decisions from day one—not after the fact Own and evolve our application security program including establish and maintain SAST/DAST scanning in CI/CD pipelines, conducting security code reviews for critical changes, and building automation that catches vulnerabilities before they reach … both technical and non-technical audiences—you can explain why something matters and motivate teams to actionKnowledge of security tools and methodologies including SAST/DAST solutions, vulnerability management platforms, security testing frameworks, and DevSecOps practices—you know which tools to use and when automation beats manual ...

TREE business. This is a hands-on role with a wide range of responsibilities including monitoring, detection, response and remediation of security risks, threats and vulnerabilities. The ultimate goal is to holistically improve Y TREE’s security posture to meet the demands of its clients and its regulators. … enhance Y TREE’s internal capabilities for routine security testing activities, and monitor/enhance security on CI/CD pipelines (SAST, DAST and SCA testing). Risk & Remediation Tracking: Maintain a register of security risks and remediations; work closely with Technology, Risk, and Compliance ...

Surface Management, this leader owns the strategy, execution and evolution of enterprise exposure management capabilities spanning vulnerability operations, exposure validation, aligning with secure development (SAST/SCA/DAST) and risk intelligence, with a relentless focus on prioritization, business impact, mitigation strategies and measurable risk reduction. The role partners closely … resolution. Secure Development & Software Supply Chain (Partner to Application Security) Partner with Application Security and Business Technology leadership to embed SAST, DAST and SCA coverage and the broader application security toolchain (e.g., secrets detection, container and infrastructure-as-code scanning) - contributing risk-based prioritization ...

grow your career. Engineering at Brex Engineering at Brex is about building systems that scale with speed and intention. Our teams span Software, Data, Security, and IT, and operate with high autonomy and deep collaboration. We tackle hard technical problems, own our outcomes, and push for excellence at every … insecure designs, work with engineering and product to design secure product features Maintain and build internal tools to automate security efforts, perform SAST and DAST testing of the Brex platform, and support secure development practices Build and contribute to a culture of collaborative security excellence through technical ...

love to hear from you About the role We're a regulated payments fintech operating across multiple European markets, scaling into banking-licence territory. Security Engineering is being rebuilt around a joint operating model with our product, platform, and infrastructure teams. We're hiring a Principal Security Engineer … when they do. Pipeline-embedded controls. Work with the platform team to extend policy-as-code and build upon existing pipeline security toolchain (SAST, SCA, secrets, or DAST for example). Checks that run in the pipeline and produce signal engineers trust, not noise they learn to ignore. Threat ...

Technology Delivery Lead: Cyber Security UK - London Technology Delivery Lead: Cyber Security Location: London (Hybrid) | Practice Area: Technology & Engineering | Type: Permanent Lead the delivery of security initiatives that safeguard the future of digital finance. The Role As a Security Delivery Lead at Capco, you’ll lead … human judgement and an understanding of responsible use, review and escalation Bonus Points For Familiarity with DevSecOps practices and security tooling such as SAST, SCA, DAST, container scanning, SIEM, firewalls or IAM solutions Experience delivering Zero Trust, cloud security, security transformation or regulatory remediation initiatives Relevant certifications ...

ambitions but needs more excellent minds to challenge the status-quo and help it reach new horizons. Where you come in? As our Senior Application Security Engineer, you’ll empower our engineering and product teams to safely adopt AI and embed robust technical security controls directly into … beneficial) and network infrastructure. Solid understanding of the Kubernetes ecosystem, Docker, and container security. Experience implementing and managing security testing programs (SCA, SAST, DAST) within pipelines like GitHub Actions, alongside release packaging and artifact management. Capability to develop secure, automated infrastructure using Terraform. You enjoy learning about both ...

production environments. Security & Quality Embed security and quality directly into the standard pipeline. You Will Work With Technologies And Practices Including SonarQube SAST DAST Dependency scanning CVE/vulnerability scanning Container/image scanning Image signing Security and quality thresholds Automated quality gates The objective … environments Automation & Scripting PowerShell Python Bash or other scripting languages beneficial Observability Prometheus Grafana Datadog Security & Software Supply Chain SonarQube Snyk or equivalent SAST DAST Dependency/CVE scanning Image/container signing Software supply-chain security Application Technologies The Pipelines Will Primarily Support C#/.NET ...

Technical Security Consultant required to support the development and continuous improvement of a Secure Software Development Lifecycle (SDLC) capability. This is a technical assurance role combining Secure SDLC, DevSecOps, application security and architecture expertise to assess control effectiveness, tooling coverage and adoption across modern engineering environments. … SDLC controls across design, development, testing, release and operation. Review security architecture, tooling coverage, integration dependencies and control gaps. Assess capabilities including SAST, SCA, DAST, secrets scanning, IaC scanning, API security, threat modelling and CI/CD security. Map controls against frameworks including NIST SSDF, OWASP SAMM ...

looking for a Senior Application Security Engineer to join our expanding Information Security team. If you are a hands‐on AppSec expert who enjoys working deep in the SDLC, partnering with talented engineers and building security into fast‐moving delivery pipelines, this role gives … following skills and experience Proficient in writing Terraform, Python and ideally KQL. Significant hands‐on experience with implementing and operating code scanners including SAST, DAST, IAST and SCA. Experience of automating security capabilities and delivering security or policy as code using tools such as OPA or Azure Policy. ...

Security Engineer to join its security function. You’ll work closely with engineering and DevSecOps teams, focusing on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle. You will also do some pre-release manual PenTesting and threat … modelling work. You’ll need strong application security experience, including OWASP Top 10, Veracode or similar scanning tools, DevSecOps/CI/CD and cloud security across Azure and/or AWS. You will also need experience of Kali Linux and some manual PenTesting skills (from either ...

000.00 (Based on the experience) Job Open date: 16th October 2026 Close date: 15th November 2026 Job Overview We are seeking a skilled Cyber Security Analyst to support our organisation’s information security, risk management, governance and compliance activities. The successful candidate will be responsible for conducting security … Apply the Secure Software Assurance Maturity Model to assess client compliance requirements for new products and architecture changes. Manage vulnerability assessments using Qualys, conduct SAST using SonarQube and DAST using WebInspect, prioritise remediation and support penetration testing. Support privileged access management using CyberArk, maintain access controls and review audit logs ...