22 of 22 Permanent Dynamic Application Security Testing Jobs in the UK excluding London

DevSecOps Engineer - Azure/Application Security We're working with an established organisation looking to appoint an experienced DevSecOps Engineer to strengthen its Azure deployment and application security capabilities. This is a hands-on position combining Azure DevOps, cloud infrastructure and application security. … Private Endpoints and Front Door/WAF Introducing deployment practices such as blue/green releases, automated rollback and infrastructure drift detection Integrating SAST, DAST, dependency and container scanning into development pipelines Conducting web application security testing using Burp Suite, OWASP ZAP or similar tools Identifying ...

Role As an Application Security Architect, you are a security expert and evangelist. You provide subject matter expertise and security guidance to product engineering teams and IT to design and build secure solutions, drive the implementation of security best practices, establish security architecture standards … platform offerings and security related services Experience with web application security scanning software and related assessment tools such as SAST/DAST/SCA Working knowledge of encryption, hashing, secure random number generation, key derivation, key management, digital signatures Understanding of internet-scale, distributed, multi-tenant architecture ...

Security/Python/DevSecOps/Azure/Security Engineer Role: Senior Application Security Engineer Remote UK | 1 day per week in London Salary: Up to £85,000 We’re looking for a Senior Application Security Engineer to join our security team … secure applications and platforms. The role Embed security into the SDLC and CI/CD pipelines, including GitHub Actions. Implement and operate SAST, DAST, IAST and SCA tooling. Secure applications, APIs, Kubernetes and containers. Develop security and policy-as-code capabilities using tools such as OPA. Help secure ...

diverse, ambitious team that celebrates creativity and collaboration. Ready to make your mark? Join us and be part of something bigger. As a Senior Security Engineer, you will work in close collaboration with our technology teams to design and implement secure, cloud-based software solutions for our clients. Working … lifecycle, embedding security practices (e.g. vulnerability management, threat modelling etc.) and automating security artifact generation (e.g. secret scanning, container security, SAST, DAST etc.). You will provide subject matter expertise in application security or cloud security sharing knowledge on threats and vulnerabilities, identifying appropriate ...

Application Security Engineer at HL, you will play a key role in strengthening the security of our products and services. Partnering with Engineering and other security functions, you'll embed and enhance security across the SDLC. You will help shape our security tooling strategy … source code build/deploy tools (e.g. Github, Gitlab CI/CD, Harness, Jenkins). Experience with common application security tooling (SAST, DAST, SCA) and vulnerability aggregation or ASPM Platforms to consolidate and prioritise findings across multiple sources. Hands-on experience of cloud platforms (AWS, Azure), including deploying ...

Description As an Application Security Engineer at HL, you will play a key role in strengthening the security of our products and services. Partnering with Engineering and other security functions, you'll embed and enhance security across the SDLC.You will help shape our security … frameworks, source code build/deploy tools (e.g. Github, Gitlab CI/CD, Harness, Jenkins).Experience with common application security tooling (SAST, DAST, SCA) and vulnerability aggregation or ASPM Platforms to consolidate and prioritise findings across multiple sources. Hands-on experience of cloud platforms (AWS, Azure), including deploying ...

doing Conduct threat modelling, risk assessments and security architecture reviews Assess security across cloud and Kubernetes/container environments Embed SAST, DAST, SCA, SBOM and secret scanning into CI/CD pipelines Perform security code reviews and provide secure coding guidance Define security requirements and support … AppSec/DevSecOps experience Hands-on experience with AWS, Azure or GCP Strong Kubernetes and Docker/container security knowledge Experience integrating SAST, DAST, SCA and security tooling into CI/CD Strong understanding of threat modelling, IAM, cryptography and application security Experience with ...

Help build a new cyber security capability from the ground up. HM Land Registry (HMLR) is building a new Red Team capability to strengthen the cyber resilience of one of the UK's most important national services. Inspire People is partnering with HMLR to recruit a Senior Infrastructure Specialist … adversary emulation. Experience gathering, analysing and interpreting technical security information. Knowledge of security technologies such as SIEM, EDR/XDR, CTEM, DAST, WAF/DDoS, Entra ID, IPS/IDS, PKI or SASE. Experience using security testing techniques, frameworks and methodologies. Scripting capability in Python, PowerShell ...

doing: Were on a mission to build a tech-forward, secure environment that empowers developers rather than putting roadblocks in their way. As an Application Security Engineer, youll act as a core technical guide across our software development lifecyclehelping us embed security directly into our code … mentor. Integrate security assessments, code reviews, and penetration testing seamlessly into the SDLC. Evaluate, implement, and run modern security tooling (SAST, DAST, IAST) to streamline vulnerability checks. Research emerging AI and LLM threat classes to design proactive, cutting-edge defensive architectures. Participate in incident response investigations ...

modern, cloud-based technology stack to deliver products. The AppSec Engineer will work in an engineering capacity to product and engineering teams to ensure security is baked into the product from the design phase creating a SecDevOps workflow. What you will be doing Design Establish and lead security … Champion sessions to keep developers aware of security developments Engineer Establish security into the CICD pipeline such as SAST/IAST/DAST Automate and build nifty security tools to test Matillion applications Integrate testing, build failures and outputs to the development team to ensure passage ...

standards, patterns, guardrails, and risk exceptions Lead threat modelling for new features and architectural changes, turning findings into practical engineering work Drive SAST/DAST adoption and quality, from tool tuning to severity calibration and developer-facing triage guidance Support product teams adopting AI, including LLMs, SLMs, and MCP, giving … ecosystem, with exposure to Java or Python Strong knowledge of the OWASP Top 10 and practical mitigation patterns Experience implementing or improving SAST/DAST processes: tool tuning, triage workflows, and reducing signal to noise Working understanding of cloud and container security fundamentals, ideally with AWS and Docker What ...

high-quality software, minimizing risks while maximizing speed and productivity. Black Duck, a recognized pioneer in application security, provides SAST, SCA, and DAST solutions that enable teams to quickly find and fix vulnerabilities and defects in proprietary code, open source components, and application behavior. With a combination … industry-leading tools, services, and expertise, only Black Duck helps organizations maximize security and quality in DevSecOps and throughout the software development life cycle. The Senior Cloud Security Engineer is a key technical contributor and emerging leader within Black Duck’s Security Operations team, responsible for securing ...

600+ leading international and independent schools), SchoolsBuddy (co-curricular & activity management), and Vectare (school transport management). We are looking for a Lead Security/DevSecOps Engineer on the Product Engineering team, with a great opportunity to be self-directed and level up security practices and capabilities. … SDLC (shift‐left): security requirements, design reviews, guardrails, and coding standards for an AI engineering reality. Select, deploy, and operationalise AppSec tooling (SAST, DAST, SCA/dependency and secrets scanning) integrated into CI/CD. Implement and operationalise secrets management: detection, rotation, and vault integration across CI/ ...

appropriate Software Development Life Cycle (SDLC) and Deployment (DEPL) process when delivering changes to Cyber applications. Role Purpose You'll help Cybersecurity engineering and application teams meet the Bank's software delivery requirements by driving the adoption of SDLC and Deployment (DEPL) Controls across both internally developed applications … with QA/test management tools (e.g., qTest, Tricentis, Zephyr). Knowledge of application security testing/scanning concepts (SAST/DAST/MAST) and vulnerability management. Experience working with Jira/Confluence/ServiceNow/Excel Power Query/Google Data Studio. Ways of Working Comfortable ...

high-quality software, minimizing risks while maximizing speed and productivity. Black Duck, a recognized pioneer in application security, provides SAST, SCA, and DAST solutions that enable teams to quickly find and fix vulnerabilities and defects in proprietary code, open source components, and application behavior. With a combination … industry-leading tools, services, and expertise, only Black Duck helps organizations maximize security and quality in DevSecOps and throughout the software development life cycle. DevOps Engineer 2 (Intermediate) Sr. DevOps Engineer will be a key player on the Cloud Operations team responsible for all SaaS and Hosted services across ...

high-quality software, minimizing risks while maximizing speed and productivity. Black Duck, a recognized pioneer in application security, provides SAST, SCA, and DAST solutions that enable teams to quickly find and fix vulnerabilities and defects in proprietary code, open source components, and application behavior. With a combination … industry-leading tools, services, and expertise, only Black Duck helps organizations maximize security and quality in DevSecOps and throughout the software development life cycle. The Senior Vulnerability Management Engineer owns the enterprise vulnerability management program across cloud, endpoint, and application surfaces, driving risk-based identification, prioritization, automated remediation ...

love to hear from you. About AppCheck: AppCheck helps organisations identify and manage cyber risk across web applications, APIs and infrastructure. AppCheck develops information security software that provides clients with vulnerability detection and reporting services for web applications and hosted infrastructure. We provide unparalleled detection across … context. Prior experience in the cybersecurity industry in either a technical or commercial capacity; experience with automated security testing technologies such as DAST/SAST is an advantage but not a must. Experience of working with SaaS/reseller networks. Experience of driving product delivery for users ...

high-quality software, minimizing risks while maximizing speed and productivity. Black Duck, a recognized pioneer in application security, provides SAST, SCA, and DAST solutions that enable teams to quickly find and fix vulnerabilities and defects in proprietary code, open source components, and application behavior. With a combination … industry-leading tools, services, and expertise, only Black Duck helps organizations maximize security and quality in DevSecOps and throughout the software development life cycle. What you’ll do Lead the design and build-out of cross-product data services for multiple product lines from one governed data plane. Define ...

there is a genuine use case. Production & Engineering You'll own solutions all the way into production, including: Infrastructure and deployment. AI evaluation and testing frameworks. MCP server implementation. Cloud deployment across AWS, Azure, Cloudflare or Vercel . Docker, Kubernetes and/or serverless architectures. TDD and robust software … engineering practices. Security, secrets management and SAST/DAST. Structured logging, monitoring, metrics and tracing. Automated CI/CD using tools such as GitHub Actions or Jenkins . Performance, scalability and cost optimisation. Operational ownership of the systems you build. Leadership & Mentoring Although this is an individual contributor role ...

secure AWS cloud platforms using Infrastructure as Code. Developing robust CI/CD pipelines to enable faster, safer software delivery. Embedding DevSecOps principles and security tooling throughout the development lifecycle. Improving platform resilience, monitoring, observability and operational performance. Driving automation and adopting AI-assisted engineering to improve efficiency. Working … following: AWS Terraform Kubernetes (EKS would be advantageous) CI/CD pipelines and deployment automation Docker, containers and Linux DevSecOps, SAST/DAST and cloud security best practices Monitoring, logging and observability platforms Agile software delivery environments Why join? Build technology that has a genuine positive impact on society. ...

securely and efficiently. The environment is highly technical, fast-moving and low on unnecessary bureaucracy, with the opportunity to work on complex projects where security, performance and reliability genuinely matter. Package £100,000+ basic salary Discretionary bonus Benefits package Hybrid working Cheltenham Training and professional certification opportunities Exposure … software delivery Experience building Internal Developer Platforms (IDPs) or developer enablement platforms would be particularly interesting. Exposure to tools or concepts including Coder, SAST, DAST, SBOM generation, vulnerability scanning or policy-as-code would also be advantageous. AWS certification at Associate level or above would be beneficial ...

securely and efficiently. The environment is highly technical, fast-moving and low on unnecessary bureaucracy, with the opportunity to work on complex projects where security, performance and reliability genuinely matter. Package £100,000+ basic salary Discretionary bonus Benefits package Hybrid working Cheltenham Training and professional certification opportunities Exposure … software delivery Experience building Internal Developer Platforms (IDPs) or developer enablement platforms would be particularly interesting. Exposure to tools or concepts including Coder, SAST, DAST, SBOM generation, vulnerability scanning or policy-as-code would also be advantageous. AWS certification at Associate level or above would be beneficial ...