4 of 4 Dynamic Application Security Testing Jobs in Bristol

Application Security Engineer at HL, you will play a key role in strengthening the security of our products and services. Partnering with Engineering and other security functions, you'll embed and enhance security across the SDLC. You will help shape our security tooling strategy … source code build/deploy tools (e.g. Github, Gitlab CI/CD, Harness, Jenkins). Experience with common application security tooling (SAST, DAST, SCA) and vulnerability aggregation or ASPM Platforms to consolidate and prioritise findings across multiple sources. Hands-on experience of cloud platforms (AWS, Azure), including deploying ...

Description As an Application Security Engineer at HL, you will play a key role in strengthening the security of our products and services. Partnering with Engineering and other security functions, you'll embed and enhance security across the SDLC.You will help shape our security … frameworks, source code build/deploy tools (e.g. Github, Gitlab CI/CD, Harness, Jenkins).Experience with common application security tooling (SAST, DAST, SCA) and vulnerability aggregation or ASPM Platforms to consolidate and prioritise findings across multiple sources. Hands-on experience of cloud platforms (AWS, Azure), including deploying ...

patterns, zero-trust principles, and least-privilege access across AWS, Azure, or GCP environments. Embed security into CI/CD pipelines , integrating SAST, DAST, SCA, and infrastructure-as-code scanning so vulnerabilities are caught before they ship, not after. Support threat modelling and design reviews with engineering teams, using … Azure, or GCP, including IAM design, network security, and secrets management. Experience embedding security tooling into CI/CD pipelines (SAST, DAST, SCA, container/IaC scanning). Proficiency in at least one scripting/programming language (Python, Go, or similar) for building security automation and tooling. ...

there is a genuine use case. Production & Engineering You'll own solutions all the way into production, including: Infrastructure and deployment. AI evaluation and testing frameworks. MCP server implementation. Cloud deployment across AWS, Azure, Cloudflare or Vercel . Docker, Kubernetes and/or serverless architectures. TDD and robust software … engineering practices. Security, secrets management and SAST/DAST. Structured logging, monitoring, metrics and tracing. Automated CI/CD using tools such as GitHub Actions or Jenkins . Performance, scalability and cost optimisation. Operational ownership of the systems you build. Leadership & Mentoring Although this is an individual contributor role ...