2 of 2 Permanent Static Application Security Testing Jobs in the South West

first and microservices design principles. Contribute to CI/CD pipelines in Azure DevOps - build, test, and deployment automation. Apply DevSecOps practices including SAST/DAST scanning, dependency management, and environment segregation. Participate in code reviews, uphold coding standards, and implement secure development practices. Support Legacy system modernisation - migrating from … Terraform and/or Bicep Containerisation - Docker and/or Kubernetes Development Practices - Mandatory RESTful API design, development, and life cycle management Secure development - SAST/DAST tooling, code review, OWASP awareness Technical documentation to a high standard On-site in Taunton, Somerset - 2 days per week minimum Desirable Skills ...

infrastructure as code Core services: Lambda, API Gateway, DynamoDB, VPC, IAM, KMS, Secrets Manager, SSM Parameter Store, SNS VPC networking - Lambda in VPC, security groups, egress configuration Lambda provisioned concurrency and auto-scaling Understanding of WAF and ingress routing patterns Testing Vitest for unit and integration testing … Testcontainers experience is a plus CI/CD & DevOps GitLab CI pipelines; multi-stage, environment-specific deployments Automated security scanning (Snyk or similar SAST/DAST) Environment promotion strategies (dev staging production) General Monorepo experience (pnpm workspaces, npm workspaces) Feature flagging (LaunchDarkly or similar) OAuth/token-based authentication ...