1 to 25 of 44 Permanent Static Application Security Testing Jobs in the UK excluding London

tooling and capabilities. Provide technical leadership for secure development technologies including Software Composition Analysis (SCA), Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), container security, code signing and secret detection. Integrate security tooling into CI/CD pipelines … security programmes and tooling. Strong knowledge of application security practices, secure coding principles and vulnerability management. Experience working with SCA, SAST, DAST and related application security technologies. Strong experience integrating security into CI/CD pipelines and DevSecOps environments. Experience with automation ...

tooling and capabilities. Provide technical leadership for secure development technologies including Software Composition Analysis (SCA), Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), container security, code signing and secret detection. Integrate security tooling into CI/CD pipelines … security programmes and tooling. Strong knowledge of application security practices, secure coding principles and vulnerability management. Experience working with SCA, SAST, DAST and related application security technologies. Strong experience integrating security into CI/CD pipelines and DevSecOps environments. Experience with automation ...

including automated testing and policy enforcement Design and implement application security controls, including: Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST) Software Composition Analysis (SCA)/dependency scanning Secrets and credentials scanning Work with engineering teams to ensure … integrating DevSecOps tooling within CI/CD environments (e.g. GitLab pipelines) Experience with application security testing tools and practices, including: SAST, DAST, SCA/dependency scanning andSecrets/credentials scanning. Experience contributing to security design reviews for applications and APIs Experience supporting or participating in penetration ...

Application Security Engineer - Manchester (3 days per week onsite) As an Application Security Engineer the focus of your role is to safeguard software applications from cyber threats by embedding security into every phase of the development lifecycle. You will bridge the gap between development … solutions, utilising both grey box and black box methodologies. Grey Box Testing: Conduct Static Application Security Testing (SAST), dependency scanning, secrets scanning, and configuration reviews. Black Box Testing: Perform Dynamic Application Security Testing (DAST), API fuzzing, authentication testing, and rate ...

Application Security Engineer - Manchester (3 days per week onsite) We are Oliver James, a global recruitment & consulting group that has been introducing talented people to great organisations since 2002. As a business, we are achieving year-on-year growth of 30%, operate across 30 countries and open … solutions, utilising both grey box and black box methodologies. Grey Box Testing: Conduct Static Application Security Testing (SAST), dependency scanning, secrets scanning, and configuration reviews. Black Box Testing: Perform Dynamic Application Security Testing (DAST), API fuzzing, authentication testing, and rate ...

security design reviews for new applications, APIs, integrations, and significant technology changes Select, implement, and manage application security tooling including SAST, DAST, SCA, and secrets detection platforms Review security testing results, assess risk, and provide clear recommendations to engineering teams on remediation and resolution activities … principles, secure coding practices, and common vulnerability classes including the OWASP Top 10 Hands‐on experience with application security tooling including SAST, DAST, SCA, secrets management, and vulnerability assessment tools Experience integrating security controls into CI/CD pipelines and cloud‐native development environments Strong understanding ...

application security. Carry out ongoing manual security assessments, coordinate third-party engagements where needed, and turn findings into clear, prioritised actions. Review SAST, DAST and SCA outputs, driving remediation through to closure and keeping tracking, ownership and prioritisation firmly on course. Provide on-demand application security … GitHub Actions, with the confidence to bring security into delivery without slowing everyone down. Practical experience with security tooling and practices including SAST, DAST, SCA, container scanning, vulnerability management, SBOM tooling such as CycloneDX, IaC security across Terraform, Bicep, Ansible and tools such as Trivy, plus Policy ...

DESCRIPTION Lead Pre-Sales Architect - Cyber Security POSITION DETAILS Position title: Lead Pre-Sales Architect - Cyber Security Reports to (position): Head of Technical Pre-Sales Team: Technical Pre-Sales Department: Services & Solutions ABOUT BYTES Bytes provides technology services and solutions that help customers achieve secure, practical and sustainable … Centre and Cloud Security, including CNAPP, micro‐segmentation, CSPM and cloud workload protection. Application Security and DevSecOps, including email security, SAST, DAST, software supply chain security and WAF. AI Security, including LLM protection, prompt injection defence, model security and AI governance. Data Security ...

Ripjar was founded by veterans of GCHQ to bring national security-grade intelligence tools to the fight against financial crime. Financial crime funds human trafficking, terrorism, corruption and sanctions evasion on a global scale, and the organisations on the front line need technology built to match the threat. Today … tools such as Bash, Python, JavaScript, and GitHub Actions. Knowledge of how to effectively use security testing and monitoring tooling, e.g. SAST and SIEM products. Knowledge of how to configure monitoring tooling for application and infrastructure metrics, e.g. Prometheus, Datadog, Open Telemetry Candidates with the following background ...

continuous innovation culture. What you’ll be doing As a DevOps Engineer at Ripjar you will be responsible for ensuring the reliability and security of the infrastructure that underpins our development and operational services. You will play an active role in supporting and continuously improving our core infrastructure offering … tools such as Bash, Python, JavaScript, and GitHub Actions. Knowledge of how to effectively use security testing and monitoring tooling, e.g. SAST and SIEM products. Knowledge of how to configure monitoring tooling for application and infrastructure metrics, e.g. Prometheus, Datadog, Open Telemetry Candidates with the following background ...

Oliver James Group is seeking an Application Security Engineer in Manchester, working on-site three days per week. You will shield software applications from cyber threats … embedding security across the development lifecycle and collaborating with development and security teams. Responsibilities include AI-specific security testing, SAST/DAST, vulnerability remediation, and risk assessments, with a strong emphasis on staying ahead of emerging threats and ensuring secure coding practices across #J-18808-Ljbffr ...

default standards, patterns, guardrails, and risk exceptions Lead threat modelling for new features and architectural changes, turning findings into practical engineering work Drive SAST/DAST adoption and quality, from tool tuning to severity calibration and developer-facing triage guidance Support product teams adopting AI, including LLMs, SLMs … C# ecosystem, with exposure to Java or Python Strong knowledge of the OWASP Top 10 and practical mitigation patterns Experience implementing or improving SAST/DAST processes: tool tuning, triage workflows, and reducing signal to noise Working understanding of cloud and container security fundamentals, ideally with AWS and Docker ...

Security Engineer to join its security function. You’ll work closely with engineering and DevSecOps teams, focusing on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle. You will also do some pre-release manual PenTesting and threat … modelling work. You’ll need strong application security experience, including OWASP Top 10, Veracode or similar scanning tools, DevSecOps/CI/CD and cloud security across Azure and/or AWS. You will also need experience of Kali Linux and some manual PenTesting skills (from either ...

Security Engineer to join its security function. You’ll work closely with engineering and DevSecOps teams, focusing on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle. You will also do some pre-release manual PenTesting and threat … modelling work. You’ll need strong application security experience, including OWASP Top 10, Veracode or similar scanning tools, DevSecOps/CI/CD and cloud security across Azure and/or AWS. You will also need experience of Kali Linux and some manual PenTesting skills (from either ...

pipelines across applications, APIs, and cloud platforms Develop and manage infrastructure as code with security-first principles Integrate automated security testing (SAST, DAST, dependency, container scanning) into the SDLC Embed threat modeling and security review gates into engineering workflows Monitor, detect, and respond to security … Considered Experience with healthcare regulatory frameworks (HIPAA, HITECH, CMS) Hands-on experience with Infrastructure as Code tools (Terraform, CloudFormation, ARM/Bicep) Proficiency with SAST/DAST, dependency/container scanning, and cloud security posture management Solid understanding of IAM, encryption, key management, and secure architecture principles Relevant security ...

Windows desktop, web and firmware products. Security Scanning: Implement and operate automated security testing within those pipelines, including static analysis (SAST), dependency analysis (SCA), secret detection, dynamic testing (DAST), vulnerability scanning and SBOM generation, with quality gates and clear, consolidated reporting. Vulnerability Management: Triage scanner … managing images and registries, and running builds in containers. Security Fundamentals: Hands-on exposure to security tooling in a development pipeline (e.g. SAST, dependency or vulnerability scanning), the ability to interpret a CVE and judge its real impact, and a sound grasp of least privilege, secrets management ...

partnering with a leading UK financial services organisation to hire an Application Security Engineer. You will focus on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle. The role requires experience with OWASP Top 10, Veracode, DevSecOps, and cloud … security across Azure/AWS, plus Kali Linux for manual testing. Hybrid work in London, Manchester or Glasgow with in-office presence ~1 day per week. #J-18808-Ljbffr ...

partnering with a leading UK financial services organisation to hire an Application Security Engineer. You will focus on secure code reviews, SAST/DAST, vulnerability assessments and embedding security throughout the CI/CD lifecycle. The role requires experience with OWASP Top 10, Veracode, DevSecOps, and cloud … security across Azure/AWS, plus Kali Linux for manual testing. Hybrid work in London, Manchester or Glasgow with in-office presence ~1 day per week. #J-18808-Ljbffr ...

visit us at www.wipro.com. Job Description Sheffield DevSecOps Engineer Role Purpose Embed security controls into the developer workflows that use Claude Code, including SAST integration on AI-generated code, secrets scanning, and secure CI/CD pipeline design. Key Responsibilities Integrate SAST tools (SonarQube, Semgrep, Checkmarx) into CI/…/Experience 5+ years in DevSecOps or application security. Strong CI/CD pipeline experience (GitHub Actions, GitLab CI, Jenkins). Experience with SAST, DAST, and secrets scanning tooling. Application security knowledge: OWASP Top 10, secure coding practices. Scripting: Python, Bash, or similar. Desirable Skills/Experience ...

## Digital Product Manager Expert - Security Platforms (hybrid/remote)Apply: Hybrid: Belfast 10 Mays Meadow: Der-Derry/Londonderry: Full time: Posted Today: End Date: October 20, 2026 (7 days left to apply): R35395At Allstate, great things happen when our people work together to protect families and their … Understanding of CI/CD pipelines, policy-as-code, and automation in security workflows.**Desirable Skills:*** Familiarity with application security tools (SAST, DAST, SCA), secrets management (Vault/KMS), IAM/PAM, vulnerability management, and cloud security posture management.* Experience with cloud platforms (Azure/ ...

telematics, and, more recently, device and identity protection. We are seeking an experienced Digital Product Manager to lead the strategy, roadmap, and delivery of security-focused products that protect enterprise assets and enable secure-by-default development practices for the Product Security team. This role will … Understanding of CI/CD pipelines, policy-as-code, and automation in security workflows. Desirable Skills Familiarity with application security tools (SAST, DAST, SCA), secrets management (Vault/KMS), IAM/PAM, vulnerability management, and cloud security posture management. Experience with cloud platforms (Azure/ ...

underrepresented groups, and neurodivergent candidates. We offer reasonable adjustments throughout the hiring process and are dedicated to creating a supportive, accessible environment for everyone. Security Engineering Lead Location: Hampshire (onsite 5 days per week) Due to the nature of the work and the customers we support, the successful candidate … security controls, identity management, and threat-mitigation patterns across cloud and hybrid infrastructures. DevSecOps Integration: Oversee the embedding of automated security scanning (SAST, DAST, SCA, container scanning) into delivery pipelines. Risk & Governance: Collaborate with accreditors, Risk Owners, and project leadership to navigate security case approvals and risk ...

underrepresented groups, and neurodivergent candidates. We offer reasonable adjustments throughout the hiring process and are dedicated to creating a supportive, accessible environment for everyone. Security Engineering Lead Location: Hampshire (onsite 5 days per week) Due to the nature of the work and the customers we support, the successful candidate … security controls, identity management, and threat-mitigation patterns across cloud and hybrid infrastructures. DevSecOps Integration: Oversee the embedding of automated security scanning (SAST, DAST, SCA, container scanning) into delivery pipelines. Risk & Governance: Collaborate with accreditors, Risk Owners, and project leadership to navigate security case approvals and risk ...

underrepresented groups, and neurodivergent candidates. We offer reasonable adjustments throughout the hiring process and are dedicated to creating a supportive, accessible environment for everyone. Security Engineer (Scrum) Location: Hampshire (onsite 5 days per week) Due to the nature of the work and the customers we support, the successful candidate … security controls, identity management, and threat-mitigation patterns across cloud and hybrid infrastructures. DevSecOps Integration: Oversee the embedding of automated security scanning (SAST, DAST, SCA, container scanning) into delivery pipelines. Risk & Governance: Collaborate with MOD accreditors, Risk Owners, and project leadership to navigate security case approvals ...

underrepresented groups, and neurodivergent candidates. We offer reasonable adjustments throughout the hiring process and are dedicated to creating a supportive, accessible environment for everyone. Security Engineer (Scrum) Location: Hampshire (onsite 5 days per week) Due to the nature of the work and the customers we support, the successful candidate … security controls, identity management, and threat-mitigation patterns across cloud and hybrid infrastructures. • DevSecOps Integration: Oversee the embedding of automated security scanning (SAST, DAST, SCA, container scanning) into delivery pipelines. • Risk & Governance: Collaborate with MOD accreditors, Risk Owners, and project leadership to navigate security case approvals ...