3 of 3 Permanent Static Application Security Testing Jobs in Scotland

Security Engineer to join its security function. You’ll work closely with engineering and DevSecOps teams, focusing on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle. You will also do some pre-release manual PenTesting and threat … modelling work. You’ll need strong application security experience, including OWASP Top 10, Veracode or similar scanning tools, DevSecOps/CI/CD and cloud security across Azure and/or AWS. You will also need experience of Kali Linux and some manual PenTesting skills (from either ...

partnering with a leading UK financial services organisation to hire an Application Security Engineer. You will focus on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle. The role requires experience with OWASP Top 10, Veracode, DevSecOps, and cloud … security across Azure/AWS, plus Kali Linux for manual testing. Hybrid work in London, Manchester or Glasgow with in-office presence ~1 day per week. #J-18808-Ljbffr ...

building and publishing reusable packages, templates, or internal libraries - with proper versioning, documentation, and consumption patterns Strong understanding of security-first engineering: encoding SAST/DAST integration, secret management, and policy-as-code into central platform assets Ability to work autonomously on complex technical problems while collaborating closely with … skills, subagents, and MCP servers that become the standard AI tooling distributed to all client teams Implement golden path templates - project scaffolding, pipeline configuration, security guardrails, AI-native workflow defaults, etc. Maintain and evolve how platform assets reach engineering teams: versioning, distribution across the appropriate channels (version-controlled component ...