5 of 5 Remote/Hybrid Static Application Security Testing Jobs in Central London

including automated testing and policy enforcement Design and implement application security controls, including: Static Application Security Testing (SAST) Dynamic Application Security Testing (DAST) Software Composition Analysis (SCA)/dependency scanning Secrets and credentials scanning Work with engineering teams to ensure … integrating DevSecOps tooling within CI/CD environments (e.g. GitLab pipelines) Experience with application security testing tools and practices, including: SAST, DAST, SCA/dependency scanning and Secrets/credentials scanning. Experience contributing to security design reviews for applications and APIs Experience supporting or participating ...

findings and work with developers on remediation. Monitor and troubleshoot security tooling and CI/CD pipelines, investigating failures and root causes. Use SAST, DAST, SCA and other automated security tooling to support secure software development. Conduct threat modelling and secure design reviews for new features, services … code and interpreting findings from security tools. Worked directly with software engineers to prioritise and remediate security issues. Hands‐on experience with SAST, DAST, SCA or similar security tooling within CI/CD environments. Practical knowledge of threat modelling and secure software development. Enough coding or scripting ...

able to interact and collaborate in person. About Engineering at Engine by Starling - https://enginebystarling.com/careers/engineering/As a Security Engineer at Engine, you'll be working on helping to keep our infrastructure secure and compliant and our staff safe and productive. … lifecycle Experience performing secure code reviews and security approvals, including the use of static and dynamic application security testing (SAST/DAST) tools Experience in cryptography management and enhancements Relevant security certifications such as ISC2 CC, CISSP, CCSP, CISM, AWS Security Specialty ...

dependencies, build agents, artefact repositories and target environments Migrating applications from legacy deployment tooling onto Octopus Deploy Defining and embedding pipeline security controls - SAST, SCA, dependency scanning, secrets detection and artefact scanning (GitHub CodeQL, Dependabot, JFrog Xray and Curation) Managing software supply-chain controls: approved repositories, open-source governance … working knowledge of Bash/shell scripting Good understanding of Git workflows, artefact repositories, package versioning and environment promotion Experience implementing secure coding controls (SAST, SCA, secrets detection) and a good grasp of secure development principles, including authentication, secrets management, certificates and TLS Windows Server and on-premises hosting knowledge ...

Engineering (40%) Design and implement Azure landing zones, management groups, and subscription architecture Build and maintain hub‐spoke network topologies with proper segmentation and security controls Implement Azure Policy, RBAC, and governance frameworks that balance security with developer productivity Manage identity and access using Entra ID, service principals … developer platform Build CI/CD pipelines in Azure DevOps or GitHub Actions with proper security scanning Implement shift‐left security: SAST/DAST, dependency scanning, infrastructure scanning, secrets management Establish infrastructure‐as‐code standards with Terraform (or Bicep), including modules and policy enforcement Create self‐service tooling ...